Seems the [non-secure context check](https://github.com/w3c/geolocation-api/pull/34/) vanished from the spec at some point. We should bring that back. Also, it seems it doesn't need to be done in parallel. We can check it on the main thread.