This must be accessed over HTTPS.