Why not HTTP + HTTPS? Let the user decide. HTTPS<i>-only</i> is silly for <i>normal</i> websites. Visitors from cooperate networks or some countries would say, your second sentense doesn&#x27;t hold in the real world.