[kpcyrd]

> It is not always trivial to move large legacy projects to secure connections

Actually, it is:

https://www.w3.org/TR/upgrade-insecure-requests/