If the client can't open a TCP connection to port 80, there's no unencrypted path to send the API keys down