Use HTTPS URLs where possible