Websites mustn't make use of the unsafe-url policy, as this will likely induce HTTPS URLs being exposed to the wire more than an HTTP link, which defeats one of the critical privateness and safety assures of HTTPS. HTTPS has become the preferred protocol for all action on the internet, as http://XXX