jboss.org will start redirecting http to https , while JBoss should not have an issue if deployment descriptors are referencing http when they get redirected, we have seen some frameworks do have an issue. So it would be better if our schemas tell users to use the https for the schema.