diff --git a/update-extpack.sh b/update-extpack.sh
index 355e8ea..348f3dc 100644
--- a/update-extpack.sh
+++ b/update-extpack.sh
@@ -54,7 +54,7 @@ fi
 
 # A new version of extpack is needed - switch to directory that can be written, and download it
 pushd ~ > /dev/null 2>&1
-$WGET http://download.virtualbox.org/virtualbox/$VBOX_VERSION/$VBOX_EXT > /dev/null 2>&1
+$WGET https://download.virtualbox.org/virtualbox/$VBOX_VERSION/$VBOX_EXT > /dev/null 2>&1
 
 # Now install it
 echo Y | $VBOXMANAGE extpack install --replace $VBOX_EXT > /dev/null 2>&1
diff --git a/virtualbox.changes b/virtualbox.changes
index 73d8f1a..a0272c4 100644
--- a/virtualbox.changes
+++ b/virtualbox.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Mar  1 14:01:26 UTC 2021 - Matthias Gerstner <matthias.gerstner@suse.com>
+
+- update-extpack.sh: explicitly use https:// protocol for authenticity. The
+  http:// URL is currently redirected to https:// but don't rely on this.
+
 -------------------------------------------------------------------
 Thu Feb  4 18:47:09 UTC 2021 - Larry Finger <Larry.Finger@gmail.com>