Https eveywhere
By always using HTTPS, web services don’t have to make a subjective judgment call about what’s “sensitive”. This leaves less room for error, and makes deployment simpler and more consistent. Widespread use of HTTPS also means that clients can begin assuming HTTPS with more confidence.