force secure melpa/elpa

init.el

@@ -1,14 +1,11 @@
 (require 'package)
 
-(add-to-list 'package-archives '("melpa" . "https://melpa.org/packages/") t)
+;; Security for packages - force HTTPS on everything.
-
+(setq package-archives '(("gnu" . "https://elpa.gnu.org/packages/")
-;; Comment/uncomment this line to enable MELPA Stable if desired.  See `package-archive-priorities`
+			 ("melpa" . "https://melpa.org/packages/")))
-;; and `package-pinned-packages`. Most users will not need or want to do this.
-;;(add-to-list 'package-archives '("melpa-stable" . "https://stable.melpa.org/packages/") t)
 
 (package-initialize)
 
-;; Disable startup noise
 (setq inhibit-startup-message t)
 
 ;; Add custom code to load path.