Mesosphere and EPEL's repositories have https endpoints available. It would be prudent to use these instead of their plaintext counterparts.