upgrade to SS4? ¯_(ツ)_/¯
upgrade to SS4.
In which case you can also look up another header that @MichalKleiner is ~about to~ just posted that carries the info on the original transport method
Just a minor note on that @Terry Apodaca - if you have a forward proxy (e.g. nginx) that terminates the SSL, it will always be off, and can result in an infinite redirect :)
Long and short, that URL implies that the file is public, yes. But things like basic auth could be a thing. The transport is http though, which means traffic is unencrypted and open for anyone to inspect (e.g. corporate firewall, along with any other hop along the way)
encryption and/or signing is another way to ensure data security and/or integrity, but that's a whole other topic from what you've asked :>
try searching for
favicon is dictated by HTML, which in turn comes from your project's templates.
wherever you've built your site