I have a Google App Engine project. On this project I have setup a custom domain and an SSL certificate. Therefore, I can use https://www.mysite.xxx, http
https://www.mysite.xxx
http
For the sake of completeness. The Java way is to set the transport guarantee to confidential like this.
profile /profile/* CONFIDENTIAL
You can also find this here in the documentation.