Switch all http to https in code base?

[Rik]

All,

How strict should we be about converting URL references from http to
https?  I notice lots of instance of @url{...} in the documentation that
are using insecure http.  And then there are others like this one:

config.h:3101:#define PACKAGE_URL "http://www.gnu.org/software/octave/";

or

README:58:  compiler, or [f2c](http://www.netlib.org/f2c/)

--Rik