[Commentor] LC-358 Charles McCathieNevile on behalf of Opera Software [Comment] 3. Security In order to build commercial services on the web, secure connections are necessary. In addition, these are widely implemented already. Is there no requirement to support https connections in the mobile space as a best practice? [Commentor reply] no reply from commenter [Working Group decision] 
We don't have any best practice regarding security, and deploying a secure service on the Web and on mobile devices require much more guidance than simple best practices. As a consequence, the group doesn't feel the document should talk about HTTPS.