Websites shouldn't use the unsafe-url plan, as this tends to lead to HTTPS URLs to get exposed over the wire more than an HTTP connection, which defeats among the list of significant privateness and safety guarantees of HTTPS. This can be a disincentive to migrate to HTTPS, as it deprives joi