This does not mean that SSL is available for the app. It means that the app currently happens to have an HTTPS endpoint that appears to work. This could be an a

This does not mean that SSL is available for the app. It means that the app currently happens to have an HTTPS endpoint that appears to work. This could be an accident on the BBC's part. As in, the app team requested HTTP and got a confirmation of HTTP, and due to a deployment quirk, also got HTTPS, but can't rely on that since next deploy might "fix" it. Possibly.