dimitri/el-get — pull request #1856 by technomancy (2014-08-12 19:06:46+00:00)
Title: Don't install insecurely without el-get-allow-insecure.

In most cases, we assume any connection is insecure unless the URL
starts with "https://", "$USERNAME@", or "ssh". There are a few
exceptions: I'm assuming all Emacswiki packages are insecure, and I
don't think we can know whether packages installed via Google Go are
secure or not.