DXA transmits data over encrypted HTTPS connections to ensure the protection of client's sensitive data. This is done to ensure that if personally identifiable information (PII) is shown on a non-HTTPS page, it is still transferred via HTTPS as opposed to transferring sensitive data via HTTP.