Using HTTP instead of HTTPS for package downloads