Took a look - I now believe the Firefox security default setting is not https only, which does explain why http worked for you.