Web sites must not use the unsafe-url plan, as this may induce HTTPS URLs to get exposed to the wire above an HTTP connection, which defeats on the list of critical privacy and protection guarantees of HTTPS. Update CDN SSL: This move is just necessary For anyone who is utilizing http://XXX