AAA_awright: "Prefer to push that the URI is an identifier of the resource, and the goal is to fetch the resource securely irrelevant of any 's' which may have gotten into it. That is the key to upgrading the security without breaking links. The goal is to have TLS everywhere, not "https" in URLs."