spec: https://w3c.github.io/webappsec-upgrade-insecure-requests/
suggested_reviewers:
  - mikewest