Add an explicit note about needing https to preempt future issues, after one user got caught on this.
Attach a file by drag & drop or click to upload
