Internet websites mustn't use the unsafe-url plan, as this could lead to HTTPS URLs being exposed around the wire over an HTTP relationship, which defeats one of several essential privateness and protection guarantees of HTTPS. This may be a disincentive to migrate to HTTPS, as it deprives joined HTTP websites http://XXX