For the online web app it's not that simple. We have to allow http://app.emby.media to work so that users who haven't' setup SSL can connect.   We could probably have it redirect to https://app.emby.media in certain circumstances, but there's still a couple problem with trying to do that. You'd have to login twice because http/https are two different urls, thus two different web apps as far as browser data storage is concerned.  And also when you're inside your local network, it would have to