We should be using HTTPS for all links that are found in product code unless there is a specific reason to use HTTP.
There should be some automation at some point to detect new HTTP links added and verify if a suitable HTTPS counterpart can be used.

Comments from @TravisEz13 in PR #3331:
"We could add a meta test suite and use a regex to validate we use https: and not http:

DSC Resources have some meta tests (not for something exactly like this):
https://github.com/PowerShell/DscResource.Tests/blob/dev/Meta.Tests.ps1"