Box.com problem

asdffdsa: How is this not a bug if Box doesn't allow redirects to non-HTTPS addresses?

The kylerlaird solution is too confusing for many end users.

Addendum: Nevermind, I see this is being worked on: