Package: lintian Severity: wishlist Dear Maintainer,
Homepage field can point to HTTP uri, for example (from: https://sources.debian.net/src/libreoffice/1:5.2.4-2/debian/control/?hl=191#L191): Homepage: http://www.libreoffice.org while HTTPS is available for the domain: https://www.libreoffice.org The tag will be useful even for homepages that currently don't support HTTPS, as HTTPS becoming the standard for the entire web (HTTP 2 require TLS) also some browsers are working on deprecating HTTP: 'Deprecating Non-Secure HTTP' https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/ 'Marking HTTP As Non-Secure' https://www.chromium.org/Home/chromium-security/marking-http-as-non-secure it will (hopefully) encourage upstream to support HTTPS for their website. it looks like at least 1500 packages are affected by this: https://codesearch.debian.net/search?q=Homepage%3A+http%3A%2F%2F+path%3Adebian%2F