I searched for all matches of the string **http://** in the progit2/master source. The result was 529 matches across 74 files. Shouldn't we use the more secure https links instead? Is there a reason that there are still http links? Is this something that you want fixed?