Yeah the OP is quite correct. Ask your generic web developer about nuances of HTTP, SSL or even networking in general.