Use https for external sources