Default

http and https, no downgrade, cross-origin allowed.