this replaces http:// urls with https:// urls on all sites that default to
https, or support it well. This is important even for downloads that are
verified using a hash sum or signature because it both provides an
alternate, backup method of verifying the download, but also greatly
reduces meta data leaks.