Personally I've been ditching the www but either is fine. Pick one and stick with it, don't mix and match. Always use https.