In fact, treat all protocols except for git:// as private.

* http:// could be private like https:// can, with basic auth. In practice, it's not really used.
* file:// refers to a local path, which is private. This isn't really used either.

lib/babushka/source.rb

@@ -45,10 +45,12 @@ def self.default_remote_for name
     def self.discover_uri_and_type path
       if path.nil?
         [nil, :implicit]
-      elsif path.to_s.sub(/^\w+:\/\//, '')[/^[^\/]+[@:]/] || path.to_s[/^https:\/\//]
+      elsif path.to_s.sub(/^\w+:\/\//, '')[/^[^\/]+[@:]/]
         [path.to_s, :private]
-      elsif path.to_s[/^(git|http|file):\/\//]
+      elsif path.to_s[/^git:\/\//]
         [path.to_s, :public]
+      elsif path.to_s[/^\w+:\/\//]
+        [path.to_s, :private]
       else
         [path.p, :local]
       end

spec/babushka/source_spec.rb

@@ -27,18 +27,18 @@
         Source.discover_uri_and_type(uri).should == [uri, :private]
       }
     end
-    it "should treat git:// and friends as public" do
+    it "should treat git:// as public" do
       [
         'git://github.com/benhoskings/babushka-deps.git',
-        'http://github.com/benhoskings/babushka-deps.git',
-        'file:///Users/ben/babushka/deps'
       ].each {|uri|
         Source.discover_uri_and_type(uri).should == [uri, :public]
       }
     end
-    it "should treat https:// as private" do
+    it "should treat other protocols as private" do
       [
-        'https://github.com/benhoskings/babushka-deps.git'
+        'http://github.com/benhoskings/babushka-deps.git',
+        'https://github.com/benhoskings/babushka-deps.git',
+        'file:///Users/ben/babushka/deps'
       ].each {|uri|
         Source.discover_uri_and_type(uri).should == [uri, :private]
       }