[HTTPS-E Rulesets] suggestion: web.nvd.nist.gov & nvd.nist.gov

[starlight . 2014q3]

Hello,

The CVE database at the above domains
seems like a good canidate for
required HTTPS.

Regards