Comment by cr3cr3

Yeah, and http only :) It would be hilarious if it had invalid cert.