Use HTTPS URLs where possible.