Force load skin from HTTPS sources.
Mojang's session server may return unencrypted HTTP URLs for player skins. This is a security concern. And unencrypted HTTP is banned in certain places. So this mod is created.
We also have a config option to disable this for some URLs if they doesn't support HTTPS, matched in regex.
Conversation