doc: use https scheme in oss-distros link
The https scheme is supported, and should be used per best practices.
The previous http link redirected to https:
$ curl -i 'http://oss-security.openwall.org/wiki/mailing-lists/distros'
HTTP/1.1 302 Moved Temporarily
Location: https://oss-security.openwall.org/wiki/mailing-lists/distros
Change-Id: I857b93eeec45996d6dc05dbf7532d1759bf4d447
Reviewed-on: https://go-review.googlesource.com/c/153457
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
diff --git a/doc/security.html b/doc/security.html
index c305ae0..b334963 100644
--- a/doc/security.html
+++ b/doc/security.html
@@ -70,7 +70,7 @@
<li>Code is audited to find any potential similar problems.</li>
<li>If it is determined, in consultation with the submitter, that a CVE-ID is
required, the primary handler obtains one via email to
-<a href="http://oss-security.openwall.org/wiki/mailing-lists/distros">oss-distros</a>.</li>
+<a href="https://oss-security.openwall.org/wiki/mailing-lists/distros">oss-distros</a>.</li>
<li>Fixes are prepared for the two most recent major releases and the head/master
revision. These fixes are not yet committed to the public repository.</li>
<li>A notification is sent to the
