Current (1.2) spec says:
All services should be available on TCP/IP port 80.
but this means that web services that should only be accessed via https are non-compliant. There is a broad trend on the internet to move from http to https even for web sites that are not concerned with private data. It would be good if the spec allowed/encouraged that. And especially when using passwords to access restricted data, https should be strongly preferred.
So, maybe better to relax this to say:
All services should be available on one of TCP/IP port 80 for http or port 443 for https.
Current (1.2) spec says:
but this means that web services that should only be accessed via https are non-compliant. There is a broad trend on the internet to move from http to https even for web sites that are not concerned with private data. It would be good if the spec allowed/encouraged that. And especially when using passwords to access restricted data, https should be strongly preferred.
So, maybe better to relax this to say: