Server interactions must not use http:// as it is inherently insecure and can lead to PII and other sensitive information being leaked through traffic sniffing or man-in-the-middle attacks. Use https:// or wss:// instead.
OWASP API8 2023 No Server HTTP
Message: Server URLs must not use http://. Use https:// or wss:// instead.
