I think Apple flipped a switch and disallowed non-TLS requests. There was another very similar thread recently.