Internet sites must not use the unsafe-url policy, as this will likely result in HTTPS URLs being exposed over the wire over an HTTP connection, which defeats among the significant privacy and protection ensures of HTTPS. This may be a disincentive emigrate to HTTPS, because it deprives joined HTTP websites http://XXX