Only HTTPS
Like most modern websites
Pure HTTP not allowed.
Running logging on the HTTPs handshake