which would only be applied if the domain is https