From 82d1712c81056e26c4f5cbeb9b1a4135f507796f Mon Sep 17 00:00:00 2001
From: Taylor Bockman <tbockman@xchg.sh>
Date: Wed, 22 Feb 2023 23:07:22 -0800
Subject: [PATCH] force secure melpa/elpa

---
 init.el | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/init.el b/init.el
index c8a293f..891705f 100644
--- a/init.el
+++ b/init.el
@@ -1,14 +1,11 @@
 (require 'package)
 
-(add-to-list 'package-archives '("melpa" . "https://melpa.org/packages/") t)
-
-;; Comment/uncomment this line to enable MELPA Stable if desired.  See `package-archive-priorities`
-;; and `package-pinned-packages`. Most users will not need or want to do this.
-;;(add-to-list 'package-archives '("melpa-stable" . "https://stable.melpa.org/packages/") t)
+;; Security for packages - force HTTPS on everything.
+(setq package-archives '(("gnu" . "https://elpa.gnu.org/packages/")
+			 ("melpa" . "https://melpa.org/packages/")))
 
 (package-initialize)
 
-;; Disable startup noise
 (setq inhibit-startup-message t)
 
 ;; Add custom code to load path.