Installing Nitrokey Security Apps Repo Error

I am starting again with Nitrokey which requires me to install security tools.
Please could somebody tell me what I am doing wrong.

Retrieving repository 'Security tools (openSUSE_Tumbleweed)' metadata ........................................[error] 
Repository 'Security tools (openSUSE_Tumbleweed)' is invalid. 
[security|https://download.opensuse.org/repositories/security/openSUSE_Tumbleweed/] Valid metadata not found at speci
fied URL 
History: 
 - Download (curl) error for 'https://download.opensuse.org/repositories/security/openSUSE_Tumbleweed/repodata/002aa6
bf54fe2d39c2e7fedefd67e7a20a71812b4e6f7d3ae49a78756718ce47-primary.xml.gz': 
Error code:  Unsupported protocol 
Error message: Redirect to protocol "http" not supported or disabled in libcurl 

 - Can't provide ./repodata/002aa6bf54fe2d39c2e7fedefd67e7a20a71812b4e6f7d3ae49a78756718ce47-primary.xml.gz 

Please check if the URIs defined for this repository are pointing to a valid repository. 
Skipping repository 'Security tools (openSUSE_Tumbleweed)' because of the above error. 
Some of the repositories have not been refreshed because of an error. 
alastair@localhost:~> 


Too difficult for me at the end of a long day!

You are using https instead of http.

- Download (curl) error for 'https://download.opensuse.org/repositories/security/openSUSE_Tumbleweed/repodata/002aa6
bf54fe2d39c2e7fedefd67e7a20a71812b4e6f7d3ae49a78756718ce47-primary.xml.gz':
Error code:  Unsupported protocol
Error message: Redirect to protocol "http" not supported or disabled in libcurl

This is pretty clear error message.

Hi arvidjaar,

Of course. I didn’t check the repo link I was sent first. I did say it had been a long day!
Please forgive me once again.
Budge

Having sorted out my own error, the subject is still of interest to me. In apps like Firefox http is no longer used and https is used to enhance browsing security.

Why is https not used for accessing repo sites?

The URL you use is redirected to one of available mirrors. Not all mirrors are using https, so it looks like downgrade from https to http which is not allowed normally.

I do not know if it is possible to configure MirrorBrain to offer only htts mirrors in this case.

If you insist on using https, you can simply select one of available mirrors directly.

Many thanks. I understand and thanks for the information.
Budge