Magento 2.0.0 - 2.0.4
Use webserver rewrites is on to remove ugly 'index.php' from every request.
When generating a sitemap from Marketing > SEO & Search > Sitemap
Using filename: sitemap.xml and path /pub/ so it's visible on the site,
All URLs get generated with a secure (HTTPS) base URL instead of HTTP.
Could be pulling it from the current Protocol when logged into Admin (HTTPS) or from the database secure_base_url
Could be an issue for stores running Varnish that do not or can not accelerate their TLS or HTTPS
