https is just as fine for SUSEMIRROR URLs (from what I can see)

And it's distribution specific anyway what protocols it supports