tree 93be0418f09003be1905e28c7e65a0706ed07800
parent 1e2b1a1a6d3c94c05649b18c231b6959046f69b0
author Ross Light <light@google.com> 1507571571 -0700
committer Ross Light <light@google.com> 1507580853 +0000

httputil: only send client authorization over HTTPS

Might just be a hypothetical concern, but better for this to fail closed
(not send credentials when needed) than to fail open (send credentials
insecurely).

Change-Id: I8542e8c0b533a3c5f53a5f03f4e3b639b6b55f71
Reviewed-on: https://go-review.googlesource.com/69290
Reviewed-by: Tuo Shan <shantuo@google.com>