get all http links from source code and checked them by hand
(do not include those from copyright notice, license files, SVG files, and abandoned Po entries)
some are broken and some are https available
and here is a report
should we convert them to https?
and how to fix the broken ones?