Just two workarounds in the mean time:
- you can disable the HTTP port completely by removing the corresponding icm/server_port_X entry from the profile.
- you can force single web services to use SSL in transaction SICF, but this only makes sense if you have a small number of webservices.
Cheers Michael