use https. dont use mirrors