note 11244 rejected and deleted from include by jmcastagnetto

I can't do a "secure include", like: include("https://secure.server2.com/myfile.txt") but it appears that if I use include("http://www.server2.com/test.txt") in the secure file https://secure.server1.com/test.php, PHP grabs the text of the include file on port 443 (secure socket layer). Can anyone confirm or deny this? Does this mean that includes are automatically "secure" if called from a secure file? Do I need to worry about the security of included data when including remote files? Thanks much, Arlo Leach http://www.typea.net