Web-sites must not use the unsafe-url policy, as this may result in HTTPS URLs to get uncovered to the wire about an HTTP relationship, which defeats on the list of important privacy and security guarantees of HTTPS. CIDR relies on the concept IP addresses may be allocated and routed dependent http://XXX