Websites mustn't make use of the unsafe-url policy, as this may induce HTTPS URLs being uncovered within the wire in excess of an HTTP connection, which defeats one of the essential privacy and stability assures of HTTPS. HTTP operates at the highest layer from the TCP/IP product—the appliance layer; as http://XXX