Switch to https protocol by default

[jayvdb]

The code defaults to http protocol. IMO the default in 2020 should be https.

[ThomasWaldmann]

I agree, but switching defaults can cause widespread issues. Did you check if that is the case here?

Also, it is just the default, users of xstatic can just tell to use https.

[ThomasWaldmann]

@deshipu @ReimarBauer any opinion about this?

[deshipu]

I don't think changing the defaults just for the sake of hype is wise in something that is supposed to be a stable building block. Yes, we could try checking all published code and see if this breaks anything, but I don't see the advantage for doing this in this case.

[ReimarBauer]

when that becomes changed I would prefer some "auto" feature, instead toggling it always.

[ThomasWaldmann]

the app using xstatic should usually know best what to choose, so i don't see how "auto" should do better?