On the Arch netboot page, several of the scripts are using HTTP. iPXE supports HTTPS, so I believe there's no reason to use HTTP.
https://releng.archlinux.org/pxeboot/arch_text.ipxe Feel free to chime in if I'm missing something. -- David Manouchehri F0FE 0296 14EA 35BC 9E4FF 9768 A6EC FD0C 4083 9755 https://keybase.io/manouchehri/key.asc
