Developers should use an HTTPS URL whenever possible when calling Load()()() to ensure they are connecting to the intended server. A malicious server can cause a denial of service (DOS) on the client by sending a feed that is too large.

Reference