Rule proposal: `prefer-https`

Enforce using HTTPS URLs over HTTP.

Fail

const foo = 'http://sindresorhus.com';

// Hello: http://sindresorhus.com

Pass

const foo = 'https://sindresorhus.com';

// Hello: https://sindresorhus.com

---

Alternative name: prefer-https. Which one do people prefer?

I’m aware this could be partly solved with the string-content rule, but I don’t think most people would think of this and it also wouldn’t work in comments.

[sindresorhus]

Should http://localhost for example be ignored?

Yes, any URL without a TLD should be ignored.

[JounQin]

Should http://localhost for example be ignored?