Web sites shouldn't make use of the unsafe-url policy, as this will likely bring about HTTPS URLs to generally be uncovered on the wire more than an HTTP connection, which defeats one of many critical privacy and security guarantees of HTTPS. This can be a disincentive emigrate to HTTPS, as http://XXX