codeguy/php-the-right-way — pull request #195 by deviantintegral (2012-11-05 20:35:53+00:00)
Title: Use HTTPS when installing composer

getcomposer.org has SSL set up. Since it's being used to download and install Composer directly, we may as well recommend users use SSL to install the package. It doesn't ensure the actual file is valid if it's been changed on the server, but does will prevent any MITM attacks against installing composer.