Comment 2 for bug 1313108

David,

Just a note the reason it was leaking data on https://reddit.com is because Reddit uses Akamai CDN for their site to scale to traffic but they do not use the SSL service because SSL via CDN providers is expensive. Instead they enable SSL via https://ssl.reddit.com using their API.

But FWIW I also do not think you can simply just change the url I think you need to make some small changes to properly make the calls via oauth2 otherwise it may kick back the call still.

https://github.com/reddit/reddit/wiki/OAuth2

Here on SSL not working on https://reddit.com and instead redirecting queries back to http http://www.reddit.com/r/redditdev/comments/155hs3/recent_problem_with_sslenabled_reddit/c7jn53u

I tested out https://reddit.com using the same query the scope works and confirmed it does the kickback to http.