Doesn't do HTTPS, also I am skeptical of cross-site javascript shenanigans happening on the server-end of silk.
People do run HTTPS clients on AWS, though. Web APIs tend to [1] require exactly that.
[1] Lala people never send sensitive data over plain HTTP I'M NOT HEARING YOU.
Sure, they might use HTTPS, but how often do they load arbitrary pages with uncontrolled javascript?
Pretty much never. How often do they make requests that are at least partially attacker-controlled, though? (Note that variants on https://www.someapi.com/...?username=foo contain attacker-controlled data...)