diff --git a/openslides/users/views.py b/openslides/users/views.py
index 40449fe83..d734d28da 100644
--- a/openslides/users/views.py
+++ b/openslides/users/views.py
@@ -597,7 +597,7 @@ class PasswordResetView(APIView):
     """
 
     http_method_names = ["post"]
-    use_https = False  # TODO: Do we use https?
+    use_https = True  # TODO: get used protocol from server, see issue #4233
 
     def post(self, request, *args, **kwargs):
         """