LCWD comment on Widgets 1.0: Access Requests Policy - reference RFC 2817

[Krzysztof Maczyński]

Informative references include RFC 2818. Please also include RFC2817,
as it's preferable on architectural grounds (the https scheme is
believed to be a mistake because it has semantics equivalent to http).