I noticed http://cobalt-org.github.io/ doesn't enforce HTTPS, which I would especially recommend since there are commands people will be copying and pasting.