Use https for compose messages, not http.

Unlike #2, use https for download links instead of http.