Web-sites must not use the unsafe-url plan, as this could bring about HTTPS URLs being uncovered on the wire about an HTTP link, which defeats one of the crucial privacy and protection ensures of HTTPS. HTTP operates at the highest layer on the TCP/IP model—the appliance layer; as does the http://XXX