When running a shop behind https, the product.url should return the https version, instead of http. Workaround could be to add a product.path method, that would only return the path part of the url. This would be helpful for inserting metadata (JSON/LD, twitter cards, facebook opengraph, etc).