Absense of favicon & 'force https'

I’m pretty sure that https has been required for some years now. I think that favicons are not the only thing that’s broken without https.