https submodule already works because it's used everywhere.  but git submodule is often blocked behind firewalls.

git port is blocked behind firewalls, use one clone protocol everywhere.