root/public: links for safe-https-everywhere