PkgInfo: use HTTPS when available