diff --git a/debian/changelog b/debian/changelog
index 5cbc943..515418d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,7 @@
   * Team upload.
   * debian/watch: Track the release tags on GitHub
   * Standards-Version updated to 3.9.8
+  * Use secure Vcs-* URLs
 
  -- Emmanuel Bourg <ebourg@apache.org>  Wed, 10 Aug 2016 09:44:16 +0200
 
diff --git a/debian/control b/debian/control
index b4fb8cb..c789b7a 100644
--- a/debian/control
+++ b/debian/control
@@ -23,8 +23,8 @@
                libsaxon-java,
                maven-repo-helper
 Standards-Version: 3.9.8
-Vcs-Git: git://anonscm.debian.org/pkg-java/findbugs.git
-Vcs-Browser: http://anonscm.debian.org/cgit/pkg-java/findbugs.git
+Vcs-Git: https://anonscm.debian.org/git/pkg-java/findbugs.git
+Vcs-Browser: https://anonscm.debian.org/cgit/pkg-java/findbugs.git
 Homepage: http://findbugs.sourceforge.net
 
 Package: findbugs