Swagger files define the scheme as http only. This should likely be changed to https (or maybe both?)?