Sites shouldn't use the unsafe-url plan, as this tends to lead to HTTPS URLs for being exposed to the wire in excess of an HTTP connection, which defeats among the important privateness and stability ensures of HTTPS. HTTPS has become the popular protocol for all activity online, as it's the http://XXX