force to use HTTPS to download packages

README.org

@@ -2,6 +2,7 @@
 - Tested with Emacs 24.3.1, 24.4, 24.5, 25.1 on Linux/Windows/Cygwin/Mac (I will stop 24.3 support at <2018-01-01>)
 - Please read FAQ to disable [[http://www.vim.org][Vim]] key bindings
 - Please read section "Key bindings" to learn key bindings
+- If you use Windows Emacs, you have to [[https://www.gnu.org/software/emacs/manual/emacs-gnutls.html][install GnuTLS Dlls manually]] to be able to install packages from remote repositories
 - Most packages from [[http://melpa.org][MELPA]] are *invisible* by default. But all packages from [[https://stable.melpa.org][MELPA Stable]] are visible. You can modify variable =melpa-include-packages= in =~/.emacs.d/lisp/init-elpa.el= to install unstable packages
 - Other issues are covered in FAQ
 - Please read section "About Emacs 23" if you uses Emacs 23.4
@@ -233,8 +234,6 @@ You can change the definition of =my-toggle-color-theme= in =init-color-theme.el
 Please =M-x multi-term=.
 
 If you want to use Zsh instead of Bash, please modify init-term-mode.el
-** Use HTTPS to download packages
-=(setq melpa-use-https-repo t)=. =melpa-use-https-repo= is defined in init-elpa.el.
 ** Setup fonts in GUI Emacs
 Non-Chinese use [[https://github.com/rolandwalker/unicode-fonts][unicode-fonts]].
 

lisp/init-elpa.el

@@ -60,23 +60,14 @@ But you may use safer HTTPS instead.")
 
 ;; We include the org repository for completeness, but don't use it.
 ;; Lock org-mode temporarily:
-(if melpa-use-https-repo
-    (setq package-archives
-          '(;; uncomment below line if you need use GNU ELPA
-            ;; ("gnu" . "https://elpa.gnu.org/packages/")
-            ;; ("org" . "http://orgmode.org/elpa/") ; latest org-mode
-            ("localelpa" . "~/.emacs.d/localelpa")
-            ("my-js2-mode" . "https://raw.githubusercontent.com/redguardtoo/js2-mode/release/")
-            ("melpa" . "https://melpa.org/packages/")
-            ("melpa-stable" . "https://stable.melpa.org/packages/")))
-  (setq package-archives
-        '(;; uncomment below line if you need use GNU ELPA
-          ;; ("gnu" . "http://elpa.gnu.org/packages/")
-          ;; ("org" . "http://orgmode.org/elpa/") ; latest org-mode
-          ("localelpa" . "~/.emacs.d/localelpa")
-          ("my-js2-mode" . "http://raw.githubusercontent.com/redguardtoo/js2-mode/release/")
-          ("melpa" . "http://melpa.org/packages/")
-          ("melpa-stable" . "http://stable.melpa.org/packages/"))))
+(setq package-archives
+      '(;; uncomment below line if you need use GNU ELPA
+        ;; ("gnu" . "https://elpa.gnu.org/packages/")
+        ;; ("org" . "http://orgmode.org/elpa/") ; latest org-mode
+        ("localelpa" . "~/.emacs.d/localelpa")
+        ("my-js2-mode" . "https://raw.githubusercontent.com/redguardtoo/js2-mode/release/")
+        ("melpa" . "https://melpa.org/packages/")
+        ("melpa-stable" . "https://stable.melpa.org/packages/")))
 
 ;; Un-comment below line if your extract https://github.com/redguardtoo/myelpa/archive/master.zip into ~/myelpa/
 ;; (setq package-archives '(("myelpa" . "~/myelpa")))