Websites shouldn't make use of the unsafe-url plan, as this will result in HTTPS URLs to become uncovered around the wire about an HTTP connection, which defeats among the list of critical privacy and protection ensures of HTTPS. This can be a disincentive to migrate to HTTPS, as it deprives http://XXX