In https://w3c.github.io/reporting/#process-header, Step 1 tells us to
Abort these steps if response’s HTTPS state is not "modern", and the origin of response’s url is not potentially trustworthy.
However, the fetch specification does not define the concept of a response's HTTPS state (the link reference is not valid either)