Http url's in klarna arguments

Questions
1

In klarna arguments, we get http in some urls.
Terms, checkout and notification is http and the rest is https.
Is there some configuration I missed?

“merchant_urls”: {
“terms”: “http://xxxxxxxx/kundtjanst/kopvillkor”,
“checkout”: “http://xxxxxxxx/kassa?accountId=KCOV3_SE&transactionNumber={checkout.order.id}”,
“confirmation”: “https://xxxxxxxx/site.axd/KlarnaPayment/Confirmation?accountId=KCOV3_SE&transactionNumber={checkout.order.id}”,
“push”: “https://xxxxxxxx/site.axd/KlarnaPayment/PushNotification?accountId=KCOV3_SE&transactionNumber={checkout.order.id}”,
“validation”: “https://xxxxxxxx/site.axd/KlarnaPayment/Validate?accountId=KCOV3_SE&transactionNumber={checkout.order.id}”,
“shipping_option_update”: null,
“address_update”: “https://xxxxxxxx/site.axd/KlarnaPayment/AddressUpdate?accountId=KCOV3_SE&transactionNumber={checkout.order.id}”,
“notification”: “http://xxxxxxxx:80/PaymentProviderResult.axd/StaticCallback/KlarnaV3?accountId=KCOV3_SE&transactionNumber={checkout.order.id}”
},

Klarna payment args: =’{
“TermsUrl”: “http://xxxxxxxx/kundtjanst/kopvillkor”,
“CheckoutUrl”: “http://xxxxxxxx/kassa”,
“ConfirmationUrl”: “https://xxxxxxxx/site.axd/KlarnaPayment/Confirmation”,
“PushUrl”: “https://xxxxxxxx/site.axd/KlarnaPayment/PushNotification”,
“ValidationUrl”: “https://xxxxxxxx/site.axd/KlarnaPayment/Validate”,
“ShippingOptionUpdateUrl”: null,
“AddressUpdateUrl”: “https://xxxxxxxx/site.axd/KlarnaPayment/AddressUpdate”,
“CountryChangeUrl”: null,
“ClientLanguage”: “sv-SE”,
“PaymentMode”: 2,
“UserHostAddress”: null,
“PaymentInfoIndex”: 0,
“Parameters”: null
}’;

Litium version: 7.1

2

What is your settings for HTTP Strict Transport Security (HSTS) on the domain name?

3

It’s not set at all;)
What’s the recommended setting for that?

4

Qualys have some recomendations.