Are internal Druid communications processes HTTP or HTTPS?

The default is HTTP, but there’s a core extension for HTTPS. Here’s some context.