Web-sites mustn't make use of the unsafe-url policy, as this may trigger HTTPS URLs to be uncovered about the wire above an HTTP connection, which defeats on the list of significant privacy and security ensures of HTTPS. HTTP operates at the highest layer of the TCP/IP design—the applying layer; as http://XXX