Must using https when retrive composer.phar

Must using https when retrive composer.phar, for security reason. or the transfer will be hijack by third party.