Internet sites mustn't use the unsafe-url policy, as this can lead to HTTPS URLs being uncovered to the wire around an HTTP relationship, which defeats one of the important privacy and security assures of HTTPS. HTTP operates at the best layer with the TCP/IP model—the applying layer; as does the http://XXX