Also, HTTPS should be opt-in.If I intend to deploy my app in some managed environment where TLS is handled by a proxy I may not want to expose an HTTPS service.
With my 3.0 release manager hat on:- HTTPS out of the box in generated projects could go into 3.1 if that's too much hassle for now. - We should add tests to generated projects for 3.0 to ensure they work and won't regress.