Web-sites mustn't use the unsafe-url coverage, as this tends to induce HTTPS URLs being exposed over the wire above an HTTP connection, which defeats among the crucial privacy and safety ensures of HTTPS. This can be a disincentive to migrate to HTTPS, as it deprives linked HTTP web sites of http://XXX