So there's this:

     On Thu, Jan 4, 2018 at 12:59 AM Shiyao MA <address@hidden> wrote:
     > Hi,

     > is there a plan to move org elpa from http to https?

     It's already https: https://orgmode.org/elpa/ …

   From "[1][O] is there a plan to move org elpa from http to https?" on
   lists.gnu.org.

   The instruction page referencing installation via Org ELPA is updated:
   [2]https://orgmode.org/elpa.html. Basically you edit your entry in your
   init file from http:// to https://, such as …
(add-to-list 'package-archives '("org" . "https://orgmode.org/elpa/") t)

   Get you some TLS!
     __________________________________________________________________

   My original entry is here: [3]Org ELPA can now be accessed via https.
   It posted Thu, 18 Jan 2018 08:49:31 +0000.
   Filed under: emacs,

References

   1. https://lists.gnu.org/archive/html/emacs-orgmode/2018-01/msg00096.html
   2. https://orgmode.org/elpa.html
   3. https://www.prjorgensen.com/?p=815