Not a requirement for 1.0, as there's no TLS support either, meaning almost everybody will use it behind a reverse proxy anyway where it doesn't matter.