HTTPS-first mode