Both are good options (NIP-95 for smaller files). Eventually, we’d like to support both. For now it will be http and access controlled on our end until clients support the proposed NIP-98 or something similar.
Our focus is client interoperability for now but as new standards are adopted we will support them.