Note: the “Allow unencrypted traffic” WinRM group policy is not related to using HTTPS. By default traffic is encrypted event over HTTP. Use Kerberos token based encryption that is already used for push notifications.