diff --git a/purl_sync/review/utils.py b/purl_sync/review/utils.py
index 6eeae1e0f..d0884d109 100644
--- a/purl_sync/review/utils.py
+++ b/purl_sync/review/utils.py
@@ -90,7 +90,7 @@ def ap_collection(objects):
 def webfinger_actor(domain, user):
     """ """
     acct = generate_webfinger(user, domain)
-    url = f"https://{domain}/.well-known/webfinger?resource=acct:{acct}"
+    url = f"http://{domain}/.well-known/webfinger?resource=acct:{acct}"  # TODO http -> https
     headers = {"User-Agent": ""}  # TODO
     try:
         response = requests.get(url, headers=headers)
diff --git a/purl_sync/review/views.py b/purl_sync/review/views.py
index 15577edd7..2296e05b3 100644
--- a/purl_sync/review/views.py
+++ b/purl_sync/review/views.py
@@ -474,7 +474,7 @@ def post(self, request, *args, **kwargs):
             form = SubscribePurlForm(request.POST)
             if form.is_valid():
                 user, domain = parse_webfinger(form.cleaned_data.get("acct"))
-                remote_actor_url = webfinger_actor(user, domain)
+                remote_actor_url = webfinger_actor(domain, user)
 
                 payload = json.dumps(
                     {