You really should test both, HTTP can't be trusted if DNS has been compromised.