They could probably fix this by having the HTTP version be served on a different subdomain that only listens for HTTP.