In the email about someone replying to my comment, there is an "Open the comment" button that links to a URL like http://url7601.excalidraw.com/ls/click?.... Chrome gives me a warning about it not being HTTPS which I was able to click through. If I try to copy the URL from the "Open the comment" button and then change to https manually, it says the cert is invalid.

There is a separate URL listed below under the text "If you have any problems viewing the comment, you can use this link:" and that uses https and is formatted like https://app.excalidraw.com/s/.../...?comment=.... Not sure why the button doesn't just use that same HTTPS link