i think the

https

approach doesn't require any additional setup, so that's probably the right choice for the fix.