diff --git a/postfix/AAAREADME b/postfix/AAAREADME
index 7b7a4b696..c93956d76 100644
--- a/postfix/AAAREADME
+++ b/postfix/AAAREADME
@@ -42,13 +42,13 @@ On-line resources devoted to the Postfix mail system
 
 Web sites:
 
-    http://www.postfix.org/		current release information
+    https://www.postfix.org/		current release information
 
 Mail addresses (PLEASE send questions to the mailing list)
 
     postfix-users@postfix.org		Postfix users mailing list
 
-In order to subscribe to the mailing list, see http://www.postfix.org/.
+In order to subscribe to the mailing list, see https://www.postfix.org/.
 
 Acknowledgments
 ===============
@@ -89,7 +89,7 @@ The HISTORY file gives a detailed log of changes to the software.
 
 Point your browser at html/index.html for Postfix documentation
 and for hyperlinked versions of Postfix manual pages.  Expect
-to see updated versions on-line at http://www.postfix.org/
+to see updated versions on-line at https://www.postfix.org/
 
 Point your MANPATH environment variable at the `man' directory (use
 an absolute path) for UNIX-style on-line manual pages.  These pages
diff --git a/postfix/HISTORY b/postfix/HISTORY
index c0e7bfd61..f254b8b39 100644
--- a/postfix/HISTORY
+++ b/postfix/HISTORY
@@ -28501,9 +28501,61 @@ Apologies for any names omitted.
 20241113
 
 	Bugfix (defect introduced: Postfix 3.10, date 20240923):
-	TLSRPT support in tlsproxy dereferenced non-extent client
+	TLSRPT support in tlsproxy dereferenced non-existent client
 	properties in the server role. Problem reported by Florian
 	Piekert. File: tlsproxy/tlsproxy.c
 
 	Cleanup: removed an unused string variable. File:
 	xsasl/xsasl_cyrus_server.c
+
+20241119
+
+	Documentation: converted hyperlinks to https:// and located
+	some early content on the Wayback Machine. Files: AAAREADME,
+	HISTORY, conf/main.cf, conf/master.cf, conf/post-install,
+	dns/dns.h, examples/smtpd-policy/README.SPF, html/index.html,
+	mantools/make_soho_readme, mantools/makemanidx, mantools/man2html,
+	mantools/postlink.sed, mantools/readme2html, master/master_avail.c,
+	postfix/postfix.c, proto/ADDRESS_CLASS_README.html,
+	proto/ADDRESS_REWRITING_README.html,
+	proto/ADDRESS_VERIFICATION_README.html,
+	proto/BACKSCATTER_README.html,
+	proto/BASIC_CONFIGURATION_README.html, proto/BDAT_README.html,
+	proto/BUILTIN_FILTER_README.html, proto/CDB_README.html,
+	proto/COMPATIBILITY_README.html,
+	proto/CONNECTION_CACHE_README.html,
+	proto/CONTENT_INSPECTION_README.html, proto/DATABASE_README.html,
+	proto/DB_README.html, proto/DEBUG_README.html,
+	proto/DEPRECATION_README.html, proto/DSN_README.html,
+	proto/ETRN_README.html, proto/FILTER_README.html,
+	proto/FORWARD_SECRECY_README.html, proto/INSTALL.html,
+	proto/IPV6_README.html, proto/LDAP_README.html,
+	proto/LINUX_README.html, proto/LMDB_README.html,
+	proto/LOCAL_RECIPIENT_README.html, proto/MAILDROP_README.html,
+	proto/MAILLOG_README.html, proto/MEMCACHE_README.html,
+	proto/MILTER_README.html, proto/MONGODB_README.html,
+	proto/MULTI_INSTANCE_README.html, proto/MYSQL_README.html,
+	proto/NFS_README.html, proto/OVERVIEW.html,
+	proto/PACKAGE_README.html, proto/PCRE_README.html,
+	proto/PGSQL_README.html, proto/POSTSCREEN_3_5_README.html,
+	proto/POSTSCREEN_README.html, proto/QSHAPE_README.html,
+	proto/README, proto/RESTRICTION_CLASS_README.html,
+	proto/SASL_README.html, proto/SCHEDULER_README.html,
+	proto/SMTPD_ACCESS_README.html, proto/SMTPD_POLICY_README.html,
+	proto/SMTPD_PROXY_README.html, proto/SMTPUTF8_README.html,
+	proto/SQLITE_README.html, proto/STANDARD_CONFIGURATION_README.html,
+	proto/STRESS_README.html, proto/TLSRPT_README.html,
+	proto/TLS_LEGACY_README.html, proto/TLS_README.html,
+	proto/TUNING_README.html, proto/UUCP_README.html,
+	proto/VERP_README.html, proto/VIRTUAL_README.html,
+	proto/XCLIENT_README.html, proto/XFORWARD_README.html,
+	proto/postconf.html.prolog, proto/postconf.proto,
+	proto/socketmap_table, qmqpd/qmqpd.c, tls/tls_misc.c,
+	util/midna_domain.c, util/netstring.c,
+	xsasl/xsasl_dovecot_server.c.
+
+20241121
+
+	Documentation: convert some narrative text for the
+	delay_logging_resolution_limit parameter into a bullet list.
+	File: proto/postconf.proto.
diff --git a/postfix/INSTALL b/postfix/INSTALL
index 90b1b2d8a..026c7fa31 100644
--- a/postfix/INSTALL
+++ b/postfix/INSTALL
@@ -681,7 +681,7 @@ is successful, then you can proceed to install Postfix (section 6).
 If the command produces compiler error messages, it may be time to search the
 web or to ask the postfix-users@postfix.org mailing list, but be sure to search
 the mailing list archives first. Some mailing list archives are linked from
-http://www.postfix.org/.
+https://www.postfix.org/.
 
 5 - Porting Postfix to an unsupported system
 
diff --git a/postfix/README_FILES/ADDRESS_VERIFICATION_README b/postfix/README_FILES/ADDRESS_VERIFICATION_README
index 3a7e51ae0..67cf4b40d 100644
--- a/postfix/README_FILES/ADDRESS_VERIFICATION_README
+++ b/postfix/README_FILES/ADDRESS_VERIFICATION_README
@@ -224,8 +224,8 @@ verification for specific domains that often appear in forged email.
         ... etcetera ...
 
 At some point in cyberspace/time, a list of frequently forged MAIL FROM domains
-could be found at http://www.monkeys.com/anti-spam/filtering/sender-domain-
-validate.in.
+was archived at https://web.archive.org/web/20080526153208/http://
+www.monkeys.com/anti-spam/filtering/sender-domain-validate.in.
 
 NOTE: One of the first things you might want to do is to turn on sender address
 verification for all your own domains.
diff --git a/postfix/README_FILES/BACKSCATTER_README b/postfix/README_FILES/BACKSCATTER_README
index 8095df27c..67670dade 100644
--- a/postfix/README_FILES/BACKSCATTER_README
+++ b/postfix/README_FILES/BACKSCATTER_README
@@ -261,7 +261,7 @@ Recognizing virus scanner mail is an error prone process, because there is a
 lot of variation in report formats. The following is only a small example of
 message header patterns. For a large collection of header and body patterns
 that recognize virus notification email, see https://web.archive.org/web/
-20100317123907/http://std.dkuug.dk/keld/virus/ or http://www.t29.dk/
+20100317123907/http://std.dkuug.dk/keld/virus/ or https://www.t29.dk/
 antiantivirus.txt.
 
     /etc/postfix/header_checks:
diff --git a/postfix/README_FILES/BUILTIN_FILTER_README b/postfix/README_FILES/BUILTIN_FILTER_README
index 690db98d1..989bec59c 100644
--- a/postfix/README_FILES/BUILTIN_FILTER_README
+++ b/postfix/README_FILES/BUILTIN_FILTER_README
@@ -165,7 +165,7 @@ LLiimmiittaattiioonnss ooff PPoossttffiixx hheeaaddeer
 
 PPrreevveennttiinngg ddaaiillyy mmaaiill ssttaattuuss rreeppoorrttss ffrroomm bbeeiinngg bblloocckkeedd
 
-The following is quoted from Jim Seymour's Pflogsumm FAQ at http://
+The following is quoted from Jim Seymour's Pflogsumm FAQ at https://
 jimsun.linxnet.com/downloads/pflogsumm-faq.txt. Pflogsumm is a program that
 analyzes Postfix logs, including the logging from rejected mail. If these logs
 contain text that was rejected by Postfix body_checks patterns, then the
diff --git a/postfix/README_FILES/CDB_README b/postfix/README_FILES/CDB_README
index 0f06d4753..0dbb5cbe2 100644
--- a/postfix/README_FILES/CDB_README
+++ b/postfix/README_FILES/CDB_README
@@ -28,11 +28,11 @@ from a vendor-specific source package.
 
 Postfix is compatible with two CDB implementations:
 
-  * The original cdb library from Daniel Bernstein, available from http://
+  * The original cdb library from Daniel Bernstein, available from https://
     cr.yp.to/cdb.html, and
 
-  * tinycdb (version 0.5 and later) from Michael Tokarev, available from http:/
-    /www.corpit.ru/mjt/tinycdb.html.
+  * tinycdb (version 0.5 and later) from Michael Tokarev, available from https:
+    //www.corpit.ru/mjt/tinycdb.html.
 
 Tinycdb is preferred, since it is a bit faster, has additional useful
 functionality and is much simpler to use.
diff --git a/postfix/README_FILES/CONTENT_INSPECTION_README b/postfix/README_FILES/CONTENT_INSPECTION_README
index a6a6fd87b..efd9dd047 100644
--- a/postfix/README_FILES/CONTENT_INSPECTION_README
+++ b/postfix/README_FILES/CONTENT_INSPECTION_README
@@ -51,6 +51,6 @@ good reasons: writing an MTA requires different skills than writing a SPAM or
 virus killer. Postfix encourages the use of external filters and standard
 protocols because this allows you to choose the best MTA and the best content
 inspection software for your purpose. Information about external content
-inspection software can be found on the Postfix website at http://
+inspection software can be found on the Postfix website at https://
 www.postfix.org/, and on the postfix-users@postfix.org mailing list.
 
diff --git a/postfix/README_FILES/DB_README b/postfix/README_FILES/DB_README
index 2d0ac9347..266464c81 100644
--- a/postfix/README_FILES/DB_README
+++ b/postfix/README_FILES/DB_README
@@ -45,7 +45,8 @@ BBuuiillddiinngg PPoossttffiixx oonn ssyysstteemmss tth
 Some UNIXes ship without Berkeley DB support; for historical reasons these use
 DBM files instead. A problem with DBM files is that they can store only limited
 amounts of data. To build Postfix with Berkeley DB support you need to download
-and install the source code from http://www.oracle.com/database/berkeley-db/.
+and install the source code from https://www.oracle.com/database/technologies/
+related/berkeleydb.html.
 
 Warning: some Linux system libraries use Berkeley DB, as do some third-party
 libraries such as SASL. If you compile Postfix with a different Berkeley DB
@@ -169,5 +170,6 @@ Add the "-lpthread" library to the "make makefiles" command.
 
     % make makefiles .... AUXLIBS="... -lpthread"
 
-More information is available at http://www.oracle.com/database/berkeley-db/.
+More information is available at https://www.oracle.com/database/technologies/
+related/berkeleydb.html.
 
diff --git a/postfix/README_FILES/INSTALL b/postfix/README_FILES/INSTALL
index 85ed2cc63..a57af61a6 100644
--- a/postfix/README_FILES/INSTALL
+++ b/postfix/README_FILES/INSTALL
@@ -681,7 +681,7 @@ is successful, then you can proceed to install Postfix (section 6).
 If the command produces compiler error messages, it may be time to search the
 web or to ask the postfix-users@postfix.org mailing list, but be sure to search
 the mailing list archives first. Some mailing list archives are linked from
-http://www.postfix.org/.
+https://www.postfix.org/.
 
 55 -- PPoorrttiinngg PPoossttffiixx ttoo aann uunnssuuppppoorrtteedd ssyysstteemm
 
diff --git a/postfix/README_FILES/IPV6_README b/postfix/README_FILES/IPV6_README
index 188003be8..a761b7ce8 100644
--- a/postfix/README_FILES/IPV6_README
+++ b/postfix/README_FILES/IPV6_README
@@ -17,7 +17,7 @@ impractical.
 
 Postfix uses the same SMTP protocol over IPv6 as it already uses over the older
 IPv4 network, and does AAAA record lookups in the DNS in addition to the older
-A records. Information about IPv6 can be found at http://www.ipv6.org/.
+A records.
 
 This document provides information on the following topics:
 
@@ -238,8 +238,9 @@ Dean Strik.
 
   * Dean Strik extended IPv6 support to platforms other than KAME and USAGI,
     updated the patch to keep up with Postfix development, and provided a
-    combined IPv6 + TLS patch. Information about his effort can be found on
-    Dean Strik's Postfix website at http://www.ipnet6.org/postfix/.
+    combined IPv6 + TLS patch. Information about his effort is found in an
+    archived copy of Dean Strik's Postfix website at https://web.archive.org/
+    web/20080603102834/http://www.ipnet6.org/postfix/.
 
   * Wietse Venema took Dean Strik's IPv6 patch, merged it into Postfix 2.2, and
     took the opportunity to eliminate all IPv4-specific code from Postfix that
diff --git a/postfix/README_FILES/LDAP_README b/postfix/README_FILES/LDAP_README
index eeef565a6..81143b213 100644
--- a/postfix/README_FILES/LDAP_README
+++ b/postfix/README_FILES/LDAP_README
@@ -1,3 +1,6 @@
+s!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN" "https://
+www.w3.org/TR/html4/loose.dtd">
+
 PPoossttffiixx LLDDAAPP HHoowwttoo
 
 -------------------------------------------------------------------------------
@@ -46,9 +49,8 @@ client code only), you could use the following command:
         --without-threads --disable-slapd --disable-slurpd \
         --disable-debug --disable-shared
 
-If you're using the libraries from the UM distribution (http://www.umich.edu/
-~dirsvcs/ldap/ldap.html) or OpenLDAP (http://www.openldap.org), something like
-this in the top level of your Postfix source tree should work:
+If you're using the libraries from OpenLDAP (https://www.openldap.org),
+something like this in the top level of your Postfix source tree should work:
 
     % make tidy
     % make makefiles CCARGS="-I/usr/local/include -DHAS_LDAP" \
diff --git a/postfix/README_FILES/MYSQL_README b/postfix/README_FILES/MYSQL_README
index 17699230a..8b8b3b190 100644
--- a/postfix/README_FILES/MYSQL_README
+++ b/postfix/README_FILES/MYSQL_README
@@ -28,7 +28,7 @@ Postfix.
 The Postfix MySQL client utilizes the mysql client library, which can be
 obtained from:
 
-    http://www.mysql.com/downloads/
+    https://www.mysql.com/downloads/
 
 In order to build Postfix with mysql map support, you will need to add -
 DHAS_MYSQL and -I for the directory containing the mysql headers, and the
diff --git a/postfix/README_FILES/PCRE_README b/postfix/README_FILES/PCRE_README
index 6dffb4b5c..ee8fcc592 100644
--- a/postfix/README_FILES/PCRE_README
+++ b/postfix/README_FILES/PCRE_README
@@ -11,8 +11,8 @@ This is because the pcre implementation is often more efficient than the POSIX
 regular expression implementation that you find on many systems.
 
 A description of how to use pcre tables, including examples, is given in the
-pcre_table(5) manual page. Information about PCRE itself can be found at http:/
-/www.pcre.org/.
+pcre_table(5) manual page. Information about PCRE itself can be found at https:
+//www.pcre.org/.
 
 UUssiinngg PPoossttffiixx ppaacckkaaggeess wwiitthh PPCCRREE ssuuppppoorrtt
 
diff --git a/postfix/README_FILES/QSHAPE_README b/postfix/README_FILES/QSHAPE_README
index 28c2386fc..17f54b0fb 100644
--- a/postfix/README_FILES/QSHAPE_README
+++ b/postfix/README_FILES/QSHAPE_README
@@ -217,8 +217,7 @@ EExxaammppllee 33:: CCoonnggeessttiioonn iinn tthhee aa
 This example is taken from a Feb 2004 discussion on the Postfix Users list.
 Congestion was reported with the "active" and "incoming" queues large and not
 shrinking despite very large delivery agent process limits. The thread is
-archived at: http://groups.google.com/
-groups?threadm=c0b7js$2r65$1@FreeBSD.csie.NCTU.edu.tw and http://
+archived at: https://web.archive.org/web/20120227170207/http://
 archives.neohapsis.com/archives/postfix/2004-02/thread.html#1371
 
 Using an older version of qshape(1) it was quickly determined that all the
diff --git a/postfix/README_FILES/SASL_README b/postfix/README_FILES/SASL_README
index 617212e5c..2eb657e60 100644
--- a/postfix/README_FILES/SASL_README
+++ b/postfix/README_FILES/SASL_README
@@ -984,7 +984,7 @@ authentication information:
 
     The mmmmeennccooddee command is part of the metamail software.
 
-  * Using Perl MMIIMMEE::::BBaassee6644 (from http://www.cpan.org/):
+  * Using Perl MMIIMMEE::::BBaassee6644 (from https://www.cpan.org/):
 
         % ppeerrll --MMMMIIMMEE::::BBaassee6644 --ee \\
             ''pprriinntt eennccooddee__bbaassee6644((""\\00uusseerrnnaammee\\00ppaasssswwoorrdd""));;''
@@ -998,7 +998,7 @@ authentication information:
         password:
 
     The ggeenn--aauutthh Perl script was written by John Jetmore and can be found at
-    http://jetmore.org/john/code/gen-auth.
+    https://jetmore.org/john/code/gen-auth.
 
 CCoonnffiigguurriinngg SSAASSLL aauutthheennttiiccaattiioonn iinn tthhee PPoossttffiixx SSMMTTPP//LLMMTTPP cclliieenntt
 
diff --git a/postfix/README_FILES/SMTPD_ACCESS_README b/postfix/README_FILES/SMTPD_ACCESS_README
index 7477a3685..cd4d1ba81 100644
--- a/postfix/README_FILES/SMTPD_ACCESS_README
+++ b/postfix/README_FILES/SMTPD_ACCESS_README
@@ -24,7 +24,7 @@ In a distant past, the Internet was a friendly environment. Mail servers
 happily forwarded mail on behalf of anyone towards any destination. On today's
 Internet, spammers abuse servers that forward mail from arbitrary systems, and
 abused systems end up on anti-spammer denylists. See, for example, the
-information on http://www.mail-abuse.org/ and other websites.
+information on https://www.spamhaus.org/ and other websites.
 
 By default, Postfix has a moderately restrictive approach to mail relaying.
 Postfix forwards mail only from clients in trusted networks, from clients that
diff --git a/postfix/README_FILES/SMTPD_POLICY_README b/postfix/README_FILES/SMTPD_POLICY_README
index 47a6fa310..63f6cb74c 100644
--- a/postfix/README_FILES/SMTPD_POLICY_README
+++ b/postfix/README_FILES/SMTPD_POLICY_README
@@ -13,8 +13,8 @@ implemented with only a dozen lines of Perl, as is shown at the end of this
 document. A complete example can be found in the Postfix source code, in the
 directory examples/smtpd-policy.
 
-Another example of policy delegation is the SPF policy server at https://
-web.archive.org/web/20190221142057/http://www.openspf.org/Software.
+Another example of policy delegation is the SPF policy server at http://
+www.open-spf.org/Software/
 
 Policy delegation is now the preferred method for adding policies to Postfix.
 It's much easier to develop a new feature in few lines of Perl, Python, Ruby,
@@ -365,16 +365,16 @@ text:
     4         reject_unauth_destination
     5         check_policy_service {
     6           inet:host:port1,
-    7           { default_action = 451 4.3.5 See http://www.example.com/
+    7           { default_action = 451 4.3.5 See https://www.example.com/
     support1 }
     8         }
     9         ...
 
 EExxaammppllee:: ggrreeyylliisstt ppoolliiccyy sseerrvveerr
 
-Greylisting is a defense against junk email that is described at http://
+Greylisting is a defense against junk email that is described at https://
 www.greylisting.org/. The idea was discussed on the postfix-users mailing list
-one year before it was popularized.
+one year before it was popularized (alternative version).
 
 The file examples/smtpd-policy/greylist.pl in the Postfix source tree
 implements a simplified greylist policy server. This server stores a time stamp
diff --git a/postfix/README_FILES/SMTPUTF8_README b/postfix/README_FILES/SMTPUTF8_README
index 9e7970e72..0b07374b8 100644
--- a/postfix/README_FILES/SMTPUTF8_README
+++ b/postfix/README_FILES/SMTPUTF8_README
@@ -278,7 +278,7 @@ current versions of the Firefox and Chrome web browsers. Specify
 "enable_idna2003_compatibility = yes" to get the historical behavior.
 
 This affects the conversion of domain names that contain for example the German
-sz (ß) and the Greek zeta (ς). See http://unicode.org/cldr/utility/idna.jsp
+sz (ß) and the Greek zeta (ς). See https://unicode.org/cldr/utility/idna.jsp
 for more examples.
 
 CCrreeddiittss
diff --git a/postfix/README_FILES/SOHO_README b/postfix/README_FILES/SOHO_README
index bbba7c210..b88e4a35b 100644
--- a/postfix/README_FILES/SOHO_README
+++ b/postfix/README_FILES/SOHO_README
@@ -28,7 +28,7 @@ PPoossttffiixx oonn aa ssttaanndd--aalloonnee IInntteer
 
 Postfix should work out of the box without change on a stand-alone machine that
 has direct Internet access. At least, that is how Postfix installs when you
-download the Postfix source code via http://www.postfix.org/.
+download the Postfix source code via https://www.postfix.org/.
 
 You can use the command "ppoossttccoonnff --nn" to find out what settings are overruled
 by your main.cf. Besides a few pathname settings, few parameters should be set
diff --git a/postfix/README_FILES/SQLITE_README b/postfix/README_FILES/SQLITE_README
index f4e98f931..7554fbcad 100644
--- a/postfix/README_FILES/SQLITE_README
+++ b/postfix/README_FILES/SQLITE_README
@@ -14,7 +14,7 @@ BBuuiillddiinngg PPoossttffiixx wwiitthh SSQQLLiittee s
 The Postfix SQLite client utilizes the sqlite3 library, which can be obtained
 from:
 
-    http://www.sqlite.org/
+    https://www.sqlite.org/
 
 In order to build Postfix with sqlite map support, you will need to add to
 CCARGS the flags -DHAS_SQLITE and -I with the directory containing the sqlite
diff --git a/postfix/README_FILES/STANDARD_CONFIGURATION_README b/postfix/README_FILES/STANDARD_CONFIGURATION_README
index a40fb7da0..592c4a563 100644
--- a/postfix/README_FILES/STANDARD_CONFIGURATION_README
+++ b/postfix/README_FILES/STANDARD_CONFIGURATION_README
@@ -31,7 +31,7 @@ PPoossttffiixx oonn aa ssttaanndd--aalloonnee IInntteer
 
 Postfix should work out of the box without change on a stand-alone machine that
 has direct Internet access. At least, that is how Postfix installs when you
-download the Postfix source code via http://www.postfix.org/.
+download the Postfix source code via https://www.postfix.org/.
 
 You can use the command "ppoossttccoonnff --nn" to find out what settings are overruled
 by your main.cf. Besides a few pathname settings, few parameters should be set
diff --git a/postfix/README_FILES/STRESS_README b/postfix/README_FILES/STRESS_README
index 8edc148e4..95bd18c21 100644
--- a/postfix/README_FILES/STRESS_README
+++ b/postfix/README_FILES/STRESS_README
@@ -66,7 +66,7 @@ Symptoms of Postfix SMTP server overload are:
      condition, increase the process count in master.cf or reduce the
      service time per client
     Oct  3 20:39:27 spike postfix/master[28905]: warning: see
-      http://www.postfix.org/STRESS_README.html for examples of
+      https://www.postfix.org/STRESS_README.html for examples of
       stress-adapting configuration settings
 
 Legitimate mail that doesn't get through during an episode of Postfix SMTP
@@ -299,7 +299,7 @@ to Postfix.
 
   * You can automatically turn on the above overload measure with Postfix 2.5
     and later, or with earlier releases that contain the stress-adaptive
-    behavior source code patch from the mirrors listed at http://
+    behavior source code patch from the mirrors listed at https://
     www.postfix.org/download.html. Simply replace line above 8 with:
 
      8      rbl_reply_maps = ${stress?hash:/etc/postfix/rbl_reply_maps}
@@ -311,7 +311,7 @@ TTeemmppoorraarryy mmeeaassuurreess ffoorr oollddeerr P
 
 See the section "Automatic stress-adaptive behavior" if you are running Postfix
 version 2.5 or later, or if you have applied the source code patch for stress-
-adaptive behavior from the mirrors listed at http://www.postfix.org/
+adaptive behavior from the mirrors listed at https://www.postfix.org/
 download.html.
 
 The following measures can be applied temporarily during overload. They still
diff --git a/postfix/README_FILES/TLS_README b/postfix/README_FILES/TLS_README
index 5e635549f..c0aaae4f1 100644
--- a/postfix/README_FILES/TLS_README
+++ b/postfix/README_FILES/TLS_README
@@ -1683,11 +1683,13 @@ verified TLS on the public Internet.
 Historical note: while the documentation of these issues and many of the
 related features were new with Postfix 2.3, the issue was well understood
 before Postfix 1.0, when Lutz Ja"nicke was designing the first unofficial
-Postfix TLS patch. See his original post http://www.imc.org/ietf-apps-tls/mail-
-archive/msg00304.html and the first response http://www.imc.org/ietf-apps-tls/
-mail-archive/msg00305.html. The problem is not even unique to SMTP or even TLS,
-similar issues exist for secure connections via aliases for HTTPS and Kerberos.
-SMTP merely uses indirect naming (via MX records) more frequently.
+Postfix TLS patch. See his original post https://web.archive.org/web/
+20070816181658/http://www.imc.org/ietf-apps-tls/mail-archive/msg00304.html and
+the first response https://web.archive.org/web/20070807073846/http://
+www.imc.org/ietf-apps-tls/mail-archive/msg00305.html. The problem is not even
+unique to SMTP or even TLS, similar issues exist for secure connections via
+aliases for HTTPS and Kerberos. SMTP merely uses indirect naming (via MX
+records) more frequently.
 
 TTLLSS ppoolliiccyy ttaabbllee
 
@@ -2506,7 +2508,7 @@ as it is installed.
 
 RReeppoorrttiinngg pprroobblleemmss
 
-Problems are preferably reported via <postfix-users@postfix.org>. See http://
+Problems are preferably reported via <postfix-users@postfix.org>. See https://
 www.postfix.org/lists.html for subscription information. When reporting a
 problem, please be thorough in the report. Patches, when possible, are greatly
 appreciated too.
diff --git a/postfix/README_FILES/UUCP_README b/postfix/README_FILES/UUCP_README
index 1368eb397..219ba6a93 100644
--- a/postfix/README_FILES/UUCP_README
+++ b/postfix/README_FILES/UUCP_README
@@ -8,7 +8,7 @@ Despite a serious lack of sex-appeal, email via UUCP over TCP is a practical
 option for sites without permanent Internet connections, and for sites without
 a fixed IP address. For first-hand information, see the following guides:
 
-  * Jim Seymour's guide for using UUCP over TCP at http://jimsun.LinxNet.com/
+  * Jim Seymour's guide for using UUCP over TCP at https://jimsun.LinxNet.com/
     jdp/uucp_over_tcp/index.html,
   * Craig Sanders's guide for SSL-encrypted UUCP over TCP using stunnel at
     http://taz.net.au/postfix/uucp/.
diff --git a/postfix/README_FILES/VERP_README b/postfix/README_FILES/VERP_README
index a721ececa..043feb722 100644
--- a/postfix/README_FILES/VERP_README
+++ b/postfix/README_FILES/VERP_README
@@ -19,7 +19,7 @@ Thus, undeliverable mail can reveal the undeliverable recipient address without
 requiring the list owner to parse bounce messages.
 
 The VERP concept was popularized by the qmail MTA and by the ezmlm mailing list
-manager. See http://cr.yp.to/proto/verp.txt for the ideas behind this concept.
+manager. See https://cr.yp.to/proto/verp.txt for the ideas behind this concept.
 
 Topics covered in this document:
 
diff --git a/postfix/conf/main.cf b/postfix/conf/main.cf
index 696d9717e..1d2c8c21a 100644
--- a/postfix/conf/main.cf
+++ b/postfix/conf/main.cf
@@ -9,7 +9,7 @@
 # For common configuration examples, see BASIC_CONFIGURATION_README
 # and STANDARD_CONFIGURATION_README. To find these documents, use
 # the command "postconf html_directory readme_directory", or go to
-# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc.
+# https://www.postfix.org/BASIC_CONFIGURATION_README.html etc.
 #
 # For best results, change no more than 2-3 parameters at a time,
 # and test if Postfix still works after every change.
diff --git a/postfix/conf/master.cf b/postfix/conf/master.cf
index 17b7551af..dc038d0d1 100644
--- a/postfix/conf/master.cf
+++ b/postfix/conf/master.cf
@@ -1,7 +1,7 @@
 #
 # Postfix master process configuration file.  For details on the format
 # of the file, see the master(5) manual page (command: "man 5 master" or
-# on-line: http://www.postfix.org/master.5.html).
+# on-line: https://www.postfix.org/master.5.html).
 #
 # Do not forget to execute "postfix reload" after editing this file.
 #
diff --git a/postfix/conf/post-install b/postfix/conf/post-install
index ed7c79a49..cceef6770 100644
--- a/postfix/conf/post-install
+++ b/postfix/conf/post-install
@@ -914,7 +914,7 @@ test -n "$first_install_reminder" && {
     Warning: you still need to edit myorigin/mydestination/mynetworks
     parameter settings in $config_directory/main.cf.
 
-    See also http://www.postfix.org/STANDARD_CONFIGURATION_README.html
+    See also https://www.postfix.org/STANDARD_CONFIGURATION_README.html
     for information about dialup sites or about sites inside a
     firewalled network.
 
diff --git a/postfix/examples/smtpd-policy/README.SPF b/postfix/examples/smtpd-policy/README.SPF
index 2590a1de1..0508a550f 100644
--- a/postfix/examples/smtpd-policy/README.SPF
+++ b/postfix/examples/smtpd-policy/README.SPF
@@ -1,6 +1,6 @@
-See http://www.openspf.org/Software for the current version of the
+See https://www.openspf.org/Software for the current version of the
 SPF policy daemon for Postfix.
 
 SPF support is also available via MILTER plugins, such as sid-milter
-at http://sourceforge.net/projects/sid-milter/ which implements both
+at https://sourceforge.net/projects/sid-milter/ which implements both
 SenderID and SPF.
diff --git a/postfix/html/ADDRESS_CLASS_README.html b/postfix/html/ADDRESS_CLASS_README.html
index 179d13dd8..ff3ff91d2 100644
--- a/postfix/html/ADDRESS_CLASS_README.html
+++ b/postfix/html/ADDRESS_CLASS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/ADDRESS_REWRITING_README.html b/postfix/html/ADDRESS_REWRITING_README.html
index c92a314bd..80c781aeb 100644
--- a/postfix/html/ADDRESS_REWRITING_README.html
+++ b/postfix/html/ADDRESS_REWRITING_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/ADDRESS_VERIFICATION_README.html b/postfix/html/ADDRESS_VERIFICATION_README.html
index f46837ca0..1222c04fd 100644
--- a/postfix/html/ADDRESS_VERIFICATION_README.html
+++ b/postfix/html/ADDRESS_VERIFICATION_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -372,8 +372,8 @@ in forged email.  </p>
 </blockquote>
 
 <p> At some point in cyberspace/time, a list of frequently forged
-MAIL FROM domains could be found at
-<a href="http://www.monkeys.com/anti-spam/filtering/sender-domain-validate.in">http://www.monkeys.com/anti-spam/filtering/sender-domain-validate.in</a>.  </p>
+MAIL FROM domains was archived at
+<a href="https://web.archive.org/web/20080526153208/http://www.monkeys.com/anti-spam/filtering/sender-domain-validate.in">https://web.archive.org/web/20080526153208/http://www.monkeys.com/anti-spam/filtering/sender-domain-validate.in</a>.  </p>
 
 <p> NOTE: One of the first things you might want to do is to turn
 on sender address verification for all your own domains. </p>
diff --git a/postfix/html/BACKSCATTER_README.html b/postfix/html/BACKSCATTER_README.html
index c151006a1..bb331b030 100644
--- a/postfix/html/BACKSCATTER_README.html
+++ b/postfix/html/BACKSCATTER_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -385,7 +385,7 @@ is only a small example of message header patterns.  For a large
 collection of header and body patterns that recognize virus
 notification email, see
 <a href="https://web.archive.org/web/20100317123907/http://std.dkuug.dk/keld/virus/">https://web.archive.org/web/20100317123907/http://std.dkuug.dk/keld/virus/</a>
-or <a href="http://www.t29.dk/antiantivirus.txt">http://www.t29.dk/antiantivirus.txt</a>.  </p>
+or <a href="https://www.t29.dk/antiantivirus.txt">https://www.t29.dk/antiantivirus.txt</a>.  </p>
 
 <blockquote>
 <pre>
diff --git a/postfix/html/BASIC_CONFIGURATION_README.html b/postfix/html/BASIC_CONFIGURATION_README.html
index d58d52a2e..555522f08 100644
--- a/postfix/html/BASIC_CONFIGURATION_README.html
+++ b/postfix/html/BASIC_CONFIGURATION_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/BDAT_README.html b/postfix/html/BDAT_README.html
index 42c88a780..b9606acf6 100644
--- a/postfix/html/BDAT_README.html
+++ b/postfix/html/BDAT_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/BUILTIN_FILTER_README.html b/postfix/html/BUILTIN_FILTER_README.html
index d2c5b9caf..f1f1bf415 100644
--- a/postfix/html/BUILTIN_FILTER_README.html
+++ b/postfix/html/BUILTIN_FILTER_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -288,7 +288,7 @@ is queued, as described in the <a href="FILTER_README.html">FILTER_README</a> do
 <h2><a name="daily">Preventing daily mail status reports from being blocked </a></h2>
 
 <p>The following is quoted from Jim Seymour's Pflogsumm FAQ at
-<a href="http://jimsun.linxnet.com/downloads/pflogsumm-faq.txt">http://jimsun.linxnet.com/downloads/pflogsumm-faq.txt</a>. Pflogsumm
+<a href="https://jimsun.linxnet.com/downloads/pflogsumm-faq.txt">https://jimsun.linxnet.com/downloads/pflogsumm-faq.txt</a>. Pflogsumm
 is a program that analyzes Postfix logs, including the logging from
 rejected mail. If these logs contain text that was rejected by
 Postfix <a href="postconf.5.html#body_checks">body_checks</a> patterns, then the logging is also likely to
diff --git a/postfix/html/CDB_README.html b/postfix/html/CDB_README.html
index db8db965f..e58ccc818 100644
--- a/postfix/html/CDB_README.html
+++ b/postfix/html/CDB_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -50,10 +50,10 @@ package.  </p>
 <ul>
 
 <li> <p> The original cdb library from Daniel Bernstein, available
-from <a href="http://cr.yp.to/cdb.html">http://cr.yp.to/cdb.html</a>, and </p>
+from <a href="https://cr.yp.to/cdb.html">https://cr.yp.to/cdb.html</a>, and </p>
 
 <li> <p> tinycdb (version 0.5 and later) from Michael Tokarev,
-available from <a href="http://www.corpit.ru/mjt/tinycdb.html">http://www.corpit.ru/mjt/tinycdb.html</a>. </p>
+available from <a href="https://www.corpit.ru/mjt/tinycdb.html">https://www.corpit.ru/mjt/tinycdb.html</a>. </p>
 
 </ul>
 
diff --git a/postfix/html/COMPATIBILITY_README.html b/postfix/html/COMPATIBILITY_README.html
index 37c37a5ad..f2cf4c2d5 100644
--- a/postfix/html/COMPATIBILITY_README.html
+++ b/postfix/html/COMPATIBILITY_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/CONNECTION_CACHE_README.html b/postfix/html/CONNECTION_CACHE_README.html
index 423c0b6d1..a40b16ae5 100644
--- a/postfix/html/CONNECTION_CACHE_README.html
+++ b/postfix/html/CONNECTION_CACHE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/CONTENT_INSPECTION_README.html b/postfix/html/CONTENT_INSPECTION_README.html
index df82282c0..5850f6a3e 100644
--- a/postfix/html/CONTENT_INSPECTION_README.html
+++ b/postfix/html/CONTENT_INSPECTION_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -85,7 +85,7 @@ skills than writing a SPAM or virus killer. Postfix encourages the
 use of external filters and standard protocols because this allows
 you to choose the best MTA and the best content inspection software
 for your purpose.  Information about external content inspection
-software can be found on the Postfix website at <a href="http://www.postfix.org/">http://www.postfix.org/</a>,
+software can be found on the Postfix website at <a href="https://www.postfix.org/">https://www.postfix.org/</a>,
 and on the postfix-users@postfix.org mailing list. </p>
 
 </body>
diff --git a/postfix/html/DATABASE_README.html b/postfix/html/DATABASE_README.html
index 87941bc78..454fd64ea 100644
--- a/postfix/html/DATABASE_README.html
+++ b/postfix/html/DATABASE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/DB_README.html b/postfix/html/DB_README.html
index 46739a740..5080ddd54 100644
--- a/postfix/html/DB_README.html
+++ b/postfix/html/DB_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -76,7 +76,7 @@ reasons these use DBM files instead. A problem with DBM files is
 that they can store only limited amounts of data. To build Postfix
 with
 Berkeley DB support you need to download and install the source
-code from <a href="http://www.oracle.com/database/berkeley-db/">http://www.oracle.com/database/berkeley-db/</a>. </p>
+code from <a href="https://www.oracle.com/database/technologies/related/berkeleydb.html">https://www.oracle.com/database/technologies/related/berkeleydb.html</a>. </p>
 
 <p> Warning: some Linux system libraries use Berkeley DB, as do
 some third-party libraries such as SASL. If you compile Postfix
@@ -240,7 +240,7 @@ undefined reference to `pthread_mutex_trylock'
 </blockquote>
 
 <p> More information is available at
-<a href="http://www.oracle.com/database/berkeley-db/">http://www.oracle.com/database/berkeley-db/</a>. </p>
+<a href="https://www.oracle.com/database/technologies/related/berkeleydb.html">https://www.oracle.com/database/technologies/related/berkeleydb.html</a>. </p>
 
 </body>
 
diff --git a/postfix/html/DEBUG_README.html b/postfix/html/DEBUG_README.html
index a27d2ada4..bed72d9e2 100644
--- a/postfix/html/DEBUG_README.html
+++ b/postfix/html/DEBUG_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/DEPRECATION_README.html b/postfix/html/DEPRECATION_README.html
index 47295681e..ace103015 100644
--- a/postfix/html/DEPRECATION_README.html
+++ b/postfix/html/DEPRECATION_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-       "http://www.w3.org/TR/html4/loose.dtd">
+       "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/DSN_README.html b/postfix/html/DSN_README.html
index 036e83d01..ef8c5db54 100644
--- a/postfix/html/DSN_README.html
+++ b/postfix/html/DSN_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/ETRN_README.html b/postfix/html/ETRN_README.html
index dc07ca0e9..7279288d6 100644
--- a/postfix/html/ETRN_README.html
+++ b/postfix/html/ETRN_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/FILTER_README.html b/postfix/html/FILTER_README.html
index e40ac9a54..ff0acba5d 100644
--- a/postfix/html/FILTER_README.html
+++ b/postfix/html/FILTER_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/FORWARD_SECRECY_README.html b/postfix/html/FORWARD_SECRECY_README.html
index 98f9f9710..f6afbf5df 100644
--- a/postfix/html/FORWARD_SECRECY_README.html
+++ b/postfix/html/FORWARD_SECRECY_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/INSTALL.html b/postfix/html/INSTALL.html
index 94d78baa7..a41610a71 100644
--- a/postfix/html/INSTALL.html
+++ b/postfix/html/INSTALL.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -977,7 +977,7 @@ Postfix (section 6).
 <p> If the command produces compiler error messages, it may be time
 to search the web or to ask the postfix-users@postfix.org mailing
 list, but be sure to search the mailing list archives first. Some
-mailing list archives are linked from <a href="http://www.postfix.org/">http://www.postfix.org/</a>. </p>
+mailing list archives are linked from <a href="https://www.postfix.org/">https://www.postfix.org/</a>. </p>
 
 <h2> <a name="5">5 - Porting Postfix to an unsupported system</a> </h2>
 
diff --git a/postfix/html/IPV6_README.html b/postfix/html/IPV6_README.html
index 39833fddb..7a4e6c2cc 100644
--- a/postfix/html/IPV6_README.html
+++ b/postfix/html/IPV6_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -36,8 +36,7 @@ address space is that it makes random network scanning impractical.
 
 <p> Postfix uses the same SMTP protocol over IPv6 as it already
 uses over the older IPv4 network, and does AAAA record lookups in
-the DNS in addition to the older A records.  Information about IPv6
-can be found at <a href="http://www.ipv6.org/">http://www.ipv6.org/</a>. </p>
+the DNS in addition to the older A records. </p>
 
 <p> This document provides information on the following topics:
 </p>
@@ -348,8 +347,8 @@ TLS patch for Postfix.  </p>
 <li> <p> Dean Strik extended IPv6 support to platforms other than
 KAME and USAGI, updated the patch to keep up with Postfix development,
 and provided a combined IPv6 + TLS patch.  Information about his
-effort can be found on Dean Strik's Postfix website at
-<a href="http://www.ipnet6.org/postfix/">http://www.ipnet6.org/postfix/</a>. </p>
+effort is found in an archived copy of Dean Strik's Postfix website at
+<a href="https://web.archive.org/web/20080603102834/http://www.ipnet6.org/postfix/">https://web.archive.org/web/20080603102834/http://www.ipnet6.org/postfix/</a>. </p>
 
 <li> <p> Wietse Venema took Dean Strik's IPv6 patch, merged it into
 Postfix 2.2, and took the opportunity to eliminate all IPv4-specific
diff --git a/postfix/html/LDAP_README.html b/postfix/html/LDAP_README.html
index ce77f94ff..6ee901a0e 100644
--- a/postfix/html/LDAP_README.html
+++ b/postfix/html/LDAP_README.html
@@ -1,5 +1,5 @@
-<!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+s!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -84,9 +84,8 @@ command: </p>
 </pre>
 </blockquote>
 
-<p> If you're using the libraries from the UM distribution
-(<a href="http://www.umich.edu/~dirsvcs/ldap/ldap.html">http://www.umich.edu/~dirsvcs/ldap/ldap.html</a>) or OpenLDAP
-(<a href="http://www.openldap.org">http://www.openldap.org</a>), something like this in the top level of
+<p> If you're using the libraries from OpenLDAP
+(<a href="https://www.openldap.org">https://www.openldap.org</a>), something like this in the top level of
 your Postfix source tree should work: </p>
 
 <blockquote>
diff --git a/postfix/html/LINUX_README.html b/postfix/html/LINUX_README.html
index 06165f993..726c5d84c 100644
--- a/postfix/html/LINUX_README.html
+++ b/postfix/html/LINUX_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/LMDB_README.html b/postfix/html/LMDB_README.html
index ee1294b7f..11edba850 100644
--- a/postfix/html/LMDB_README.html
+++ b/postfix/html/LMDB_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/LOCAL_RECIPIENT_README.html b/postfix/html/LOCAL_RECIPIENT_README.html
index 5a614e0cc..6def51dc3 100644
--- a/postfix/html/LOCAL_RECIPIENT_README.html
+++ b/postfix/html/LOCAL_RECIPIENT_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/MAILDROP_README.html b/postfix/html/MAILDROP_README.html
index 6c5b4ca12..124b8a7ea 100644
--- a/postfix/html/MAILDROP_README.html
+++ b/postfix/html/MAILDROP_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/MAILLOG_README.html b/postfix/html/MAILLOG_README.html
index ab751f4c6..a67ecbcc8 100644
--- a/postfix/html/MAILLOG_README.html
+++ b/postfix/html/MAILLOG_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/MEMCACHE_README.html b/postfix/html/MEMCACHE_README.html
index 462c76c8e..7c9468943 100644
--- a/postfix/html/MEMCACHE_README.html
+++ b/postfix/html/MEMCACHE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/MILTER_README.html b/postfix/html/MILTER_README.html
index b72fdb885..02767bd76 100644
--- a/postfix/html/MILTER_README.html
+++ b/postfix/html/MILTER_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/MONGODB_README.html b/postfix/html/MONGODB_README.html
index a05d1f5bf..fe6e0dcb1 100644
--- a/postfix/html/MONGODB_README.html
+++ b/postfix/html/MONGODB_README.html
@@ -1,4 +1,4 @@
-<!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN" "https://www.w3.org/TR/html4/loose.dtd">
 <html>
 <head>
 <title>Postfix MongoDB Howto</title>
diff --git a/postfix/html/MULTI_INSTANCE_README.html b/postfix/html/MULTI_INSTANCE_README.html
index 52099ad5e..95d375b3f 100644
--- a/postfix/html/MULTI_INSTANCE_README.html
+++ b/postfix/html/MULTI_INSTANCE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/MYSQL_README.html b/postfix/html/MYSQL_README.html
index ca0feb7ad..f8ced9330 100644
--- a/postfix/html/MYSQL_README.html
+++ b/postfix/html/MYSQL_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -47,7 +47,7 @@ There is no need to recompile Postfix. </p>
 which can be obtained from: </p>
 
 <blockquote>
-    <p> <a href="http://www.mysql.com/downloads/">http://www.mysql.com/downloads/</a> </p>
+    <p> <a href="https://www.mysql.com/downloads/">https://www.mysql.com/downloads/</a> </p>
 </blockquote>
 
 <p> In order to build Postfix with mysql map support, you will need to add
diff --git a/postfix/html/NFS_README.html b/postfix/html/NFS_README.html
index 0a9a8c055..9cff5d43f 100644
--- a/postfix/html/NFS_README.html
+++ b/postfix/html/NFS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/OVERVIEW.html b/postfix/html/OVERVIEW.html
index eb54740f4..bd7b8c4a6 100644
--- a/postfix/html/OVERVIEW.html
+++ b/postfix/html/OVERVIEW.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/PACKAGE_README.html b/postfix/html/PACKAGE_README.html
index ecf071fcd..8c33aa665 100644
--- a/postfix/html/PACKAGE_README.html
+++ b/postfix/html/PACKAGE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/PCRE_README.html b/postfix/html/PCRE_README.html
index 2488e3747..b2fcae67f 100644
--- a/postfix/html/PCRE_README.html
+++ b/postfix/html/PCRE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -29,7 +29,7 @@ expression implementation that you find on many systems. </p>
 
 <p> A description of how to use pcre tables, including examples,
 is given in the <a href="pcre_table.5.html">pcre_table(5)</a> manual page. Information about PCRE
-itself can be found at <a href="http://www.pcre.org/">http://www.pcre.org/</a>. </p>
+itself can be found at <a href="https://www.pcre.org/">https://www.pcre.org/</a>. </p>
 
 <h2>Using Postfix packages with PCRE support</h2>
 
diff --git a/postfix/html/PGSQL_README.html b/postfix/html/PGSQL_README.html
index 3909e6df9..b45011394 100644
--- a/postfix/html/PGSQL_README.html
+++ b/postfix/html/PGSQL_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/POSTSCREEN_3_5_README.html b/postfix/html/POSTSCREEN_3_5_README.html
index 269b44ac6..f1f55fb0f 100644
--- a/postfix/html/POSTSCREEN_3_5_README.html
+++ b/postfix/html/POSTSCREEN_3_5_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <head>
 
diff --git a/postfix/html/POSTSCREEN_README.html b/postfix/html/POSTSCREEN_README.html
index 9bef8db4a..110fe8fd0 100644
--- a/postfix/html/POSTSCREEN_README.html
+++ b/postfix/html/POSTSCREEN_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <head>
 
@@ -64,8 +64,8 @@ worms or viruses with easy-to-recognize signatures. </p>
 
 <li> <p> The fourth layer provides heavy-weight content inspection
 with external content filters. Typical examples are <a
-href="http://www.ijs.si/software/amavisd/">Amavisd-new</a>, <a
-href="http://spamassassin.apache.org/">SpamAssassin</a>, and <a
+href="https://www.ijs.si/software/amavisd/">Amavisd-new</a>, <a
+href="https://spamassassin.apache.org/">SpamAssassin</a>, and <a
 href="MILTER_README.html">Milter applications</a>. </p>
 
 </ul>
@@ -1201,7 +1201,7 @@ that decrypts/encrypts the sessions for multiple SMTP clients. </p>
 
 <p> The <a href="tlsproxy.8.html">tlsproxy(8)</a> implementation led to the discovery of a "new"
 class of vulnerability (<a
-href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0411"
+href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0411"
 >CVE-2011-0411</a>) that affected multiple implementations of SMTP,
 POP, IMAP, NNTP, and FTP over TLS. </p>
 
diff --git a/postfix/html/QSHAPE_README.html b/postfix/html/QSHAPE_README.html
index 0ac3a1352..14b819475 100644
--- a/postfix/html/QSHAPE_README.html
+++ b/postfix/html/QSHAPE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -323,9 +323,7 @@ Users list.  Congestion was reported with the
 "<a href="QSHAPE_README.html#active_queue">active"</a> and "<a href="QSHAPE_README.html#incoming_queue">incoming" queues</a>
 large and not shrinking despite very large delivery agent
 process limits.  The thread is archived at:
-<a href="http://groups.google.com/groups?threadm=c0b7js$2r65$1@FreeBSD.csie.NCTU.edu.tw">http://groups.google.com/groups?threadm=c0b7js$2r65$1@FreeBSD.csie.NCTU.edu.tw</a>
-and
-<a href="http://archives.neohapsis.com/archives/postfix/2004-02/thread.html#1371">http://archives.neohapsis.com/archives/postfix/2004-02/thread.html#1371</a>
+<a href="https://web.archive.org/web/20120227170207/http://archives.neohapsis.com/archives/postfix/2004-02/thread.html#1371">https://web.archive.org/web/20120227170207/http://archives.neohapsis.com/archives/postfix/2004-02/thread.html#1371</a>
 </p>
 
 <p> Using an older version of <a href="qshape.1.html">qshape(1)</a> it was quickly determined
diff --git a/postfix/html/RESTRICTION_CLASS_README.html b/postfix/html/RESTRICTION_CLASS_README.html
index 1d2be09f5..0fe719736 100644
--- a/postfix/html/RESTRICTION_CLASS_README.html
+++ b/postfix/html/RESTRICTION_CLASS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/SASL_README.html b/postfix/html/SASL_README.html
index f02208e6e..f07a2da95 100644
--- a/postfix/html/SASL_README.html
+++ b/postfix/html/SASL_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <head>
 
@@ -178,7 +178,7 @@ later. </p>
 <p> Dovecot is a POP/IMAP server that has its own configuration to
 authenticate POP/IMAP clients. When the Postfix SMTP server uses
 Dovecot SASL, it reuses parts of this configuration.  Consult the
-<a href="http://wiki.dovecot.org">Dovecot documentation</a> for how
+<a href="https://wiki.dovecot.org">Dovecot documentation</a> for how
 to configure and operate the Dovecot authentication server.  </p>
 
 <h4><a name="server_dovecot_comm">Postfix to Dovecot SASL communication</a></h4>
@@ -1085,7 +1085,7 @@ to add the above attribute. </p>
 <strong>Note</strong>
 
 <p> Read the chapter "Using SASL" in the <a
-href="http://www.openldap.org/doc/admin">OpenLDAP Admin Guide</a>
+href="https://www.openldap.org/doc/admin">OpenLDAP Admin Guide</a>
 for more detailed instructions to set up SASL authentication in
 OpenLDAP. </p>
 
@@ -1575,7 +1575,7 @@ encoded authentication information: </p>
 <p> The <strong>mmencode</strong> command is part of the metamail
 software. </p>
 
-<li> <p> Using Perl <b>MIME::Base64</b> (from <a href="http://www.cpan.org/">http://www.cpan.org/</a>): </p>
+<li> <p> Using Perl <b>MIME::Base64</b> (from <a href="https://www.cpan.org/">https://www.cpan.org/</a>): </p>
 
 <blockquote>
 <pre>
@@ -1597,7 +1597,7 @@ password:
 </blockquote>
 
 <p> The <strong>gen-auth</strong> Perl script was written by John
-Jetmore and can be found at <a href="http://jetmore.org/john/code/gen-auth">http://jetmore.org/john/code/gen-auth</a>. </p>
+Jetmore and can be found at <a href="https://jetmore.org/john/code/gen-auth">https://jetmore.org/john/code/gen-auth</a>. </p>
 
 </ul>
 
@@ -2201,7 +2201,7 @@ it unless you are forced to. The makers of Cyrus SASL write: </p>
 
 <blockquote> <i> This library is being deprecated and applications
 should transition to using the SASLv2 library</i> (source: <a
-href="http://www.cyrusimap.org/download.html">Project Cyrus:
+href="https://www.cyrusimap.org/download.html">Project Cyrus:
 Downloads</a>). </blockquote>
 
 <p> If you still need to set it up, here's a quick rundown: </p>
diff --git a/postfix/html/SCHEDULER_README.html b/postfix/html/SCHEDULER_README.html
index 5d16e2868..8d48b7e60 100644
--- a/postfix/html/SCHEDULER_README.html
+++ b/postfix/html/SCHEDULER_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/SMTPD_ACCESS_README.html b/postfix/html/SMTPD_ACCESS_README.html
index 55e9fd3c7..02003fd45 100644
--- a/postfix/html/SMTPD_ACCESS_README.html
+++ b/postfix/html/SMTPD_ACCESS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -57,7 +57,7 @@ Mail servers happily forwarded mail on behalf of anyone towards
 any destination.  On today's Internet, spammers abuse servers that
 forward mail from arbitrary systems, and abused systems end up on
 anti-spammer denylists.  See, for example, the information on
-<a href="http://www.mail-abuse.org/">http://www.mail-abuse.org/</a> and other websites.  </p>
+<a href="https://www.spamhaus.org/">https://www.spamhaus.org/</a> and other websites.  </p>
 
 <p> By default, Postfix has a moderately restrictive approach to
 mail relaying. Postfix forwards mail only from clients in trusted
diff --git a/postfix/html/SMTPD_POLICY_README.html b/postfix/html/SMTPD_POLICY_README.html
index be729aa45..1202b1dec 100644
--- a/postfix/html/SMTPD_POLICY_README.html
+++ b/postfix/html/SMTPD_POLICY_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -32,7 +32,7 @@ can be found in the Postfix source code, in the directory
 examples/smtpd-policy. </p>
 
 <p> Another example of policy delegation is the SPF policy server
-at <a href="https://web.archive.org/web/20190221142057/http://www.openspf.org/Software">https://web.archive.org/web/20190221142057/http://www.openspf.org/Software</a>.  </p>
+at <a href="http://www.open-spf.org/Software/">http://www.open-spf.org/Software/</a>  </p>
 
 <p> Policy delegation is now the preferred method for adding policies
 to Postfix. It's much easier to develop a new feature in few lines
@@ -480,7 +480,7 @@ different default actions with different SMTP status codes or text:
 4         <a href="postconf.5.html#reject_unauth_destination">reject_unauth_destination</a>
 5         <a href="postconf.5.html#check_policy_service">check_policy_service</a> {
 6           inet:host:port1, 
-7           { default_action = 451 4.3.5 See <a href="http://www.example.com/support1">http://www.example.com/support1</a> }
+7           { default_action = 451 4.3.5 See <a href="https://www.example.com/support1">https://www.example.com/support1</a> }
 8         } 
 9         ...
 </pre>
@@ -489,10 +489,12 @@ different default actions with different SMTP status codes or text:
 <h2><a name="greylist">Example: greylist policy server</a></h2>
 
 <p> Greylisting is a defense against junk email that is described at
-<a href="http://www.greylisting.org/">http://www.greylisting.org/</a>. The idea was discussed on the
+<a href="https://www.greylisting.org/">https://www.greylisting.org/</a>. The idea was discussed on the
 postfix-users mailing list <a
-href="http://archives.neohapsis.com/archives/postfix/2002-03/0846.html">
-one year before it was popularized</a>. </p>
+href="https://marc.info/?l=postfix-users&m=101594914212564&w=2">
+one year before it was popularized</a> (<a
+href="http://archives.neohapsis.com/archives/postfix/2002-03/0846.html">alternative
+version</a>). </p>
 
 <p> The file examples/smtpd-policy/greylist.pl in the Postfix source
 tree implements a simplified greylist policy server. This server
diff --git a/postfix/html/SMTPD_PROXY_README.html b/postfix/html/SMTPD_PROXY_README.html
index ee7dfbd3d..c3656c5f5 100644
--- a/postfix/html/SMTPD_PROXY_README.html
+++ b/postfix/html/SMTPD_PROXY_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/SMTPUTF8_README.html b/postfix/html/SMTPUTF8_README.html
index 5634ca4ed..10f22e4e6 100644
--- a/postfix/html/SMTPUTF8_README.html
+++ b/postfix/html/SMTPUTF8_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -376,7 +376,7 @@ Firefox and Chrome web browsers. Specify "<a href="postconf.5.html#enable_idna20
 
 <p> This affects the conversion of domain names that contain for
 example the German sz (ß) and the Greek zeta (ς). See
-<a href="http://unicode.org/cldr/utility/idna.jsp">http://unicode.org/cldr/utility/idna.jsp</a> for more examples. </p>
+<a href="https://unicode.org/cldr/utility/idna.jsp">https://unicode.org/cldr/utility/idna.jsp</a> for more examples. </p>
 
 <h2> <a name="credits">Credits</a> </h2>
 
diff --git a/postfix/html/SOHO_README.html b/postfix/html/SOHO_README.html
index 2c5def7f8..02d099580 100644
--- a/postfix/html/SOHO_README.html
+++ b/postfix/html/SOHO_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -63,7 +63,7 @@ further information on these topics. </p>
 <p> Postfix should work out of the box without change on a stand-alone
 machine that has direct Internet access.  At least, that is how
 Postfix installs when you download the Postfix source code via
-<a href="http://www.postfix.org/">http://www.postfix.org/</a>. </p>
+<a href="https://www.postfix.org/">https://www.postfix.org/</a>. </p>
 
 <p> You can use the command "<b>postconf -n</b>" to find out what
 settings are overruled by your <a href="postconf.5.html">main.cf</a>. Besides a few pathname
diff --git a/postfix/html/SQLITE_README.html b/postfix/html/SQLITE_README.html
index fac6f730a..20dad17d8 100644
--- a/postfix/html/SQLITE_README.html
+++ b/postfix/html/SQLITE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -31,7 +31,7 @@ databases: you can use one for a <a href="virtual.5.html">virtual(5)</a> table,
 which can be obtained from: </p>
 
 <blockquote>
-    <p> <a href="http://www.sqlite.org/">http://www.sqlite.org/</a> </p>
+    <p> <a href="https://www.sqlite.org/">https://www.sqlite.org/</a> </p>
 </blockquote>
 
 <p> In order to build Postfix with sqlite map support, you will
diff --git a/postfix/html/STANDARD_CONFIGURATION_README.html b/postfix/html/STANDARD_CONFIGURATION_README.html
index 6c5e88b3b..59f996ab4 100644
--- a/postfix/html/STANDARD_CONFIGURATION_README.html
+++ b/postfix/html/STANDARD_CONFIGURATION_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -66,7 +66,7 @@ Internet hostname</a>
 <p> Postfix should work out of the box without change on a stand-alone
 machine that has direct Internet access.  At least, that is how
 Postfix installs when you download the Postfix source code via
-<a href="http://www.postfix.org/">http://www.postfix.org/</a>. </p>
+<a href="https://www.postfix.org/">https://www.postfix.org/</a>. </p>
 
 <p> You can use the command "<b>postconf -n</b>" to find out what
 settings are overruled by your <a href="postconf.5.html">main.cf</a>. Besides a few pathname
diff --git a/postfix/html/STRESS_README.html b/postfix/html/STRESS_README.html
index ecc4c71d2..95d256078 100644
--- a/postfix/html/STRESS_README.html
+++ b/postfix/html/STRESS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -111,7 +111,7 @@ Oct  3 20:39:27 spike postfix/master[28905]: warning: to avoid this
  condition, increase the process count in <a href="master.5.html">master.cf</a> or reduce the
  service time per client
 Oct  3 20:39:27 spike postfix/master[28905]: warning: see
-  <a href="http://www.postfix.org/STRESS_README.html">http://www.postfix.org/STRESS_README.html</a> for examples of
+  <a href="https://www.postfix.org/STRESS_README.html">https://www.postfix.org/STRESS_README.html</a> for examples of
   stress-adapting configuration settings
 </pre>
 
@@ -401,7 +401,7 @@ described below.  </p>
 <li> <p> You can automatically turn on the above overload measure
 with Postfix 2.5 and later, or with earlier releases that contain
 the stress-adaptive behavior source code patch from the mirrors
-listed at <a href="http://www.postfix.org/download.html">http://www.postfix.org/download.html</a>. Simply replace line
+listed at <a href="https://www.postfix.org/download.html">https://www.postfix.org/download.html</a>. Simply replace line
 above 8 with: </p>
 
 <pre>
@@ -419,7 +419,7 @@ in section "<a href="#adapt">Automatic stress-adaptive behavior</a>".
 <p> See the section "<a href="#adapt">Automatic stress-adaptive
 behavior</a>" if you are running Postfix version 2.5 or later, or
 if you have applied the source code patch for stress-adaptive
-behavior from the mirrors listed at <a href="http://www.postfix.org/download.html">http://www.postfix.org/download.html</a>.
+behavior from the mirrors listed at <a href="https://www.postfix.org/download.html">https://www.postfix.org/download.html</a>.
 </p>
 
 <p> The following measures can be applied temporarily during overload.
diff --git a/postfix/html/TLSRPT_README.html b/postfix/html/TLSRPT_README.html
index 6bbc0be28..783be6b8a 100644
--- a/postfix/html/TLSRPT_README.html
+++ b/postfix/html/TLSRPT_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-  "http://www.w3.org/TR/html4/loose.dtd">
+  "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/TLS_LEGACY_README.html b/postfix/html/TLS_LEGACY_README.html
index da415f61d..4762ed682 100644
--- a/postfix/html/TLS_LEGACY_README.html
+++ b/postfix/html/TLS_LEGACY_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/TLS_README.html b/postfix/html/TLS_README.html
index a77f69d47..f0f985573 100644
--- a/postfix/html/TLS_README.html
+++ b/postfix/html/TLS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -2214,9 +2214,9 @@ the applicability of verified TLS on the public Internet. </p>
 related features were new with Postfix 2.3, the issue was well
 understood before Postfix 1.0, when Lutz J&auml;nicke was designing
 the first unofficial Postfix TLS patch. See his original post <a
-href="http://www.imc.org/ietf-apps-tls/mail-archive/msg00304.html">http://www.imc.org/ietf-apps-tls/mail-archive/msg00304.html</a>
+href="https://web.archive.org/web/20070816181658/http://www.imc.org/ietf-apps-tls/mail-archive/msg00304.html">https://web.archive.org/web/20070816181658/http://www.imc.org/ietf-apps-tls/mail-archive/msg00304.html</a>
 and the first response <a
-href="http://www.imc.org/ietf-apps-tls/mail-archive/msg00305.html">http://www.imc.org/ietf-apps-tls/mail-archive/msg00305.html</a>.
+href="https://web.archive.org/web/20070807073846/http://www.imc.org/ietf-apps-tls/mail-archive/msg00305.html">https://web.archive.org/web/20070807073846/http://www.imc.org/ietf-apps-tls/mail-archive/msg00305.html</a>.
 The problem is not even unique to SMTP or even TLS, similar issues exist
 for secure connections via aliases for HTTPS and Kerberos. SMTP merely
 uses indirect naming (via MX records) more frequently. </p>
@@ -2738,7 +2738,7 @@ an OpenSSL library that could be vulnerable. </p>
 
 <p> Note: Disabling LEGACY_SERVER_CONNECT is not wise at this
 time, lots of servers are still unpatched and Postfix is <a
-href="http://www.postfix.org/wip.html#tls-renegotiation">not
+href="https://www.postfix.org/wip.html#tls-renegotiation">not
 significantly vulnerable</a> to the renegotiation issue in the TLS
 protocol. </p>
 
@@ -3264,7 +3264,7 @@ you can start using Postfix as soon as it is installed.  </p>
 <h2> <a name="problems"> Reporting problems </a> </h2>
 
 <p> Problems are preferably reported via &lt;postfix-users@postfix.org&gt;.
-See <a href="http://www.postfix.org/lists.html">http://www.postfix.org/lists.html</a> for subscription information.
+See <a href="https://www.postfix.org/lists.html">https://www.postfix.org/lists.html</a> for subscription information.
 When reporting a problem, please be thorough in the report.  Patches,
 when possible, are greatly appreciated too. </p>
 
diff --git a/postfix/html/TUNING_README.html b/postfix/html/TUNING_README.html
index eac9b73d6..0aff78465 100644
--- a/postfix/html/TUNING_README.html
+++ b/postfix/html/TUNING_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -685,7 +685,7 @@ kernel.threads-max=2048
 
 <li> <p> Solaris kernel parameters can be specified in /etc/system,
 as described in the <a
-href="http://www.science.uva.nl/pub/solaris/solaris2.html#q3.48">Solaris
+href="https://web.archive.org/web/20070214110126/http://www.science.uva.nl/pub/solaris/solaris2.html#q3.48">Solaris
 FAQ</a> entry titled "How can I increase the number of file
 descriptors per process?" </p>
 
diff --git a/postfix/html/UUCP_README.html b/postfix/html/UUCP_README.html
index e5f7587a5..4e3c2d216 100644
--- a/postfix/html/UUCP_README.html
+++ b/postfix/html/UUCP_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -28,7 +28,7 @@ see the following guides: </p>
 <ul>
 
 <li> Jim Seymour's guide for using UUCP over TCP at
-<a href="http://jimsun.LinxNet.com/jdp/uucp_over_tcp/index.html">http://jimsun.LinxNet.com/jdp/uucp_over_tcp/index.html</a>,
+<a href="https://jimsun.LinxNet.com/jdp/uucp_over_tcp/index.html">https://jimsun.LinxNet.com/jdp/uucp_over_tcp/index.html</a>,
 
 <li> Craig Sanders's guide for SSL-encrypted UUCP over TCP
 using stunnel at <a href="http://taz.net.au/postfix/uucp/">http://taz.net.au/postfix/uucp/</a>.
diff --git a/postfix/html/VERP_README.html b/postfix/html/VERP_README.html
index 8ec6f1de8..c5f5f8dd6 100644
--- a/postfix/html/VERP_README.html
+++ b/postfix/html/VERP_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -42,7 +42,7 @@ address without requiring the list owner to parse bounce messages.
 </p>
 
 <p> The VERP concept was popularized by the qmail MTA and by the ezmlm
-mailing list manager.  See <a href="http://cr.yp.to/proto/verp.txt">http://cr.yp.to/proto/verp.txt</a> for the
+mailing list manager.  See <a href="https://cr.yp.to/proto/verp.txt">https://cr.yp.to/proto/verp.txt</a> for the
 ideas behind this concept. </p>
 
 <p> Topics covered in this document: </p>
diff --git a/postfix/html/VIRTUAL_README.html b/postfix/html/VIRTUAL_README.html
index 57f53d86d..900b07a37 100644
--- a/postfix/html/VIRTUAL_README.html
+++ b/postfix/html/VIRTUAL_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/XCLIENT_README.html b/postfix/html/XCLIENT_README.html
index 22862943b..96897f99a 100644
--- a/postfix/html/XCLIENT_README.html
+++ b/postfix/html/XCLIENT_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/XFORWARD_README.html b/postfix/html/XFORWARD_README.html
index ce58bb720..20a2fed0e 100644
--- a/postfix/html/XFORWARD_README.html
+++ b/postfix/html/XFORWARD_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/access.5.html b/postfix/html/access.5.html
index 5ab271111..a349c0e4b 100644
--- a/postfix/html/access.5.html
+++ b/postfix/html/access.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/aliases.5.html b/postfix/html/aliases.5.html
index 6c71da498..181dc9e3b 100644
--- a/postfix/html/aliases.5.html
+++ b/postfix/html/aliases.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/anvil.8.html b/postfix/html/anvil.8.html
index 56f1cacde..0647075d3 100644
--- a/postfix/html/anvil.8.html
+++ b/postfix/html/anvil.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/bounce.5.html b/postfix/html/bounce.5.html
index 7a756aacd..12cd42030 100644
--- a/postfix/html/bounce.5.html
+++ b/postfix/html/bounce.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/bounce.8.html b/postfix/html/bounce.8.html
index 33ffe62f8..603ca0f53 100644
--- a/postfix/html/bounce.8.html
+++ b/postfix/html/bounce.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/canonical.5.html b/postfix/html/canonical.5.html
index d768ec0bc..6cef44e8d 100644
--- a/postfix/html/canonical.5.html
+++ b/postfix/html/canonical.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/cidr_table.5.html b/postfix/html/cidr_table.5.html
index b85167e1e..b754c5a90 100644
--- a/postfix/html/cidr_table.5.html
+++ b/postfix/html/cidr_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/cleanup.8.html b/postfix/html/cleanup.8.html
index 70e9a6188..fa0f1eac2 100644
--- a/postfix/html/cleanup.8.html
+++ b/postfix/html/cleanup.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/defer.8.html b/postfix/html/defer.8.html
index 33ffe62f8..603ca0f53 100644
--- a/postfix/html/defer.8.html
+++ b/postfix/html/defer.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/discard.8.html b/postfix/html/discard.8.html
index 801688f98..9d0e1ebde 100644
--- a/postfix/html/discard.8.html
+++ b/postfix/html/discard.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/dnsblog.8.html b/postfix/html/dnsblog.8.html
index f930bf143..7ab1cfc11 100644
--- a/postfix/html/dnsblog.8.html
+++ b/postfix/html/dnsblog.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/error.8.html b/postfix/html/error.8.html
index 521f5e61e..aee2cd8ad 100644
--- a/postfix/html/error.8.html
+++ b/postfix/html/error.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/flush.8.html b/postfix/html/flush.8.html
index 728cb749b..616363cd2 100644
--- a/postfix/html/flush.8.html
+++ b/postfix/html/flush.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/generic.5.html b/postfix/html/generic.5.html
index 03a3b7bd1..b9a4e0991 100644
--- a/postfix/html/generic.5.html
+++ b/postfix/html/generic.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/header_checks.5.html b/postfix/html/header_checks.5.html
index 422e12d70..757ca572f 100644
--- a/postfix/html/header_checks.5.html
+++ b/postfix/html/header_checks.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/index.html b/postfix/html/index.html
index 610fac87c..bbe7794e7 100644
--- a/postfix/html/index.html
+++ b/postfix/html/index.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/ldap_table.5.html b/postfix/html/ldap_table.5.html
index e7cc7e737..e805a35c2 100644
--- a/postfix/html/ldap_table.5.html
+++ b/postfix/html/ldap_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/lmdb_table.5.html b/postfix/html/lmdb_table.5.html
index ce7c233a1..60624494e 100644
--- a/postfix/html/lmdb_table.5.html
+++ b/postfix/html/lmdb_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/lmtp.8.html b/postfix/html/lmtp.8.html
index 96eac7890..945bd926d 100644
--- a/postfix/html/lmtp.8.html
+++ b/postfix/html/lmtp.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/local.8.html b/postfix/html/local.8.html
index a8bafada8..2a7945801 100644
--- a/postfix/html/local.8.html
+++ b/postfix/html/local.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/mailq.1.html b/postfix/html/mailq.1.html
index 3977355eb..4645b733a 100644
--- a/postfix/html/mailq.1.html
+++ b/postfix/html/mailq.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/makedefs.1.html b/postfix/html/makedefs.1.html
index 49615066e..b2bc7193f 100644
--- a/postfix/html/makedefs.1.html
+++ b/postfix/html/makedefs.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/master.5.html b/postfix/html/master.5.html
index ee0c2d57f..e5ac43a58 100644
--- a/postfix/html/master.5.html
+++ b/postfix/html/master.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/master.8.html b/postfix/html/master.8.html
index a673b5d50..679f0d72a 100644
--- a/postfix/html/master.8.html
+++ b/postfix/html/master.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/memcache_table.5.html b/postfix/html/memcache_table.5.html
index 5202477d2..42796b717 100644
--- a/postfix/html/memcache_table.5.html
+++ b/postfix/html/memcache_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/mongodb_table.5.html b/postfix/html/mongodb_table.5.html
index 342e50ddc..88f5a4d4c 100644
--- a/postfix/html/mongodb_table.5.html
+++ b/postfix/html/mongodb_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/mysql_table.5.html b/postfix/html/mysql_table.5.html
index 25c5c13e8..9d06504ba 100644
--- a/postfix/html/mysql_table.5.html
+++ b/postfix/html/mysql_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/newaliases.1.html b/postfix/html/newaliases.1.html
index 3977355eb..4645b733a 100644
--- a/postfix/html/newaliases.1.html
+++ b/postfix/html/newaliases.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/nisplus_table.5.html b/postfix/html/nisplus_table.5.html
index 6d5c1549c..302915bb8 100644
--- a/postfix/html/nisplus_table.5.html
+++ b/postfix/html/nisplus_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/oqmgr.8.html b/postfix/html/oqmgr.8.html
index 42ecb2b55..0bebfb533 100644
--- a/postfix/html/oqmgr.8.html
+++ b/postfix/html/oqmgr.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/pcre_table.5.html b/postfix/html/pcre_table.5.html
index 304b9b2c9..887ccd7ba 100644
--- a/postfix/html/pcre_table.5.html
+++ b/postfix/html/pcre_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/pgsql_table.5.html b/postfix/html/pgsql_table.5.html
index 0b153b93b..5bb1778ad 100644
--- a/postfix/html/pgsql_table.5.html
+++ b/postfix/html/pgsql_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/pickup.8.html b/postfix/html/pickup.8.html
index 8f664a33f..6b721fa98 100644
--- a/postfix/html/pickup.8.html
+++ b/postfix/html/pickup.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/pipe.8.html b/postfix/html/pipe.8.html
index cccafcf13..a714cacb8 100644
--- a/postfix/html/pipe.8.html
+++ b/postfix/html/pipe.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postalias.1.html b/postfix/html/postalias.1.html
index 3f899c67e..ed2fcbc9e 100644
--- a/postfix/html/postalias.1.html
+++ b/postfix/html/postalias.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postcat.1.html b/postfix/html/postcat.1.html
index 0f7fac36c..7acac3f94 100644
--- a/postfix/html/postcat.1.html
+++ b/postfix/html/postcat.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postconf.1.html b/postfix/html/postconf.1.html
index 2a43544e3..65d1a198d 100644
--- a/postfix/html/postconf.1.html
+++ b/postfix/html/postconf.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postconf.5.html b/postfix/html/postconf.5.html
index a40f79520..5e7aa3706 100644
--- a/postfix/html/postconf.5.html
+++ b/postfix/html/postconf.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -2918,10 +2918,18 @@ Example:
 <p> The maximal number of digits after the decimal point when logging
 sub-second delay values.  Specify a number in the range 0..6.  </p>
 
-<p> Large delay values are rounded off to an integral number of seconds;
-delay values below the <a href="postconf.5.html#delay_logging_resolution_limit">delay_logging_resolution_limit</a> are logged
-as "0", and delay values under 100s are logged with at most two-digit
-precision.  </p>
+<ul>
+
+<li> <p> Delays &ge; 100s are rounded off to an integral number of
+seconds. </p>
+
+<li> <p> Delays &lt; 10^-$<a href="postconf.5.html#delay_logging_resolution_limit">delay_logging_resolution_limit</a> are
+rounded off to "0".  </p>
+
+<li> <p> Other delays are rounded off to two significant digits,
+or fewer if the result would exceed the delay_resolution_limit. </p>
+
+</ul>
 
 <p> The format of the "delays=a/b/c/d" logging is as follows: </p>
 
@@ -3333,7 +3341,7 @@ when converting UTF-8 domain names to/from the ASCII form that is
 used for DNS lookups. Specify "yes" for compatibility with Postfix
 &le; 3.1 (not recommended). This affects the conversion of domain
 names that contain for example the German sz and the Greek zeta.
-See <a href="http://unicode.org/cldr/utility/idna.jsp">http://unicode.org/cldr/utility/idna.jsp</a> for more examples.
+See <a href="https://unicode.org/cldr/utility/idna.jsp">https://unicode.org/cldr/utility/idna.jsp</a> for more examples.
 </p>
 
 <p> This feature is available in Postfix 3.2 and later.  </p>
diff --git a/postfix/html/postdrop.1.html b/postfix/html/postdrop.1.html
index 553ad5d71..7ea46ffb8 100644
--- a/postfix/html/postdrop.1.html
+++ b/postfix/html/postdrop.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postfix-manuals.html b/postfix/html/postfix-manuals.html
index 84774a52b..4525e7d46 100644
--- a/postfix/html/postfix-manuals.html
+++ b/postfix/html/postfix-manuals.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/html/postfix-tls.1.html b/postfix/html/postfix-tls.1.html
index ca93b5358..272d98b53 100644
--- a/postfix/html/postfix-tls.1.html
+++ b/postfix/html/postfix-tls.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postfix-wrapper.5.html b/postfix/html/postfix-wrapper.5.html
index 787dff2e4..88884eece 100644
--- a/postfix/html/postfix-wrapper.5.html
+++ b/postfix/html/postfix-wrapper.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postfix.1.html b/postfix/html/postfix.1.html
index cfe871ba0..73c33598c 100644
--- a/postfix/html/postfix.1.html
+++ b/postfix/html/postfix.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postkick.1.html b/postfix/html/postkick.1.html
index c19b5e77c..07d062d26 100644
--- a/postfix/html/postkick.1.html
+++ b/postfix/html/postkick.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postlock.1.html b/postfix/html/postlock.1.html
index 1b81f874b..655e1ce24 100644
--- a/postfix/html/postlock.1.html
+++ b/postfix/html/postlock.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postlog.1.html b/postfix/html/postlog.1.html
index b8ac9858e..23f9d69ae 100644
--- a/postfix/html/postlog.1.html
+++ b/postfix/html/postlog.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postlogd.8.html b/postfix/html/postlogd.8.html
index ff75597b8..4faf5d1e3 100644
--- a/postfix/html/postlogd.8.html
+++ b/postfix/html/postlogd.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postmap.1.html b/postfix/html/postmap.1.html
index 6b39877ee..cac47bf84 100644
--- a/postfix/html/postmap.1.html
+++ b/postfix/html/postmap.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postmulti.1.html b/postfix/html/postmulti.1.html
index 60988c922..6ae219568 100644
--- a/postfix/html/postmulti.1.html
+++ b/postfix/html/postmulti.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postqueue.1.html b/postfix/html/postqueue.1.html
index 5d9d95049..3d63737d1 100644
--- a/postfix/html/postqueue.1.html
+++ b/postfix/html/postqueue.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postscreen.8.html b/postfix/html/postscreen.8.html
index 22ea8dea5..e2183ba6f 100644
--- a/postfix/html/postscreen.8.html
+++ b/postfix/html/postscreen.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/postsuper.1.html b/postfix/html/postsuper.1.html
index e5eef1f63..1e3cf0ae5 100644
--- a/postfix/html/postsuper.1.html
+++ b/postfix/html/postsuper.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/posttls-finger.1.html b/postfix/html/posttls-finger.1.html
index 650c77980..4b713678d 100644
--- a/postfix/html/posttls-finger.1.html
+++ b/postfix/html/posttls-finger.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/proxymap.8.html b/postfix/html/proxymap.8.html
index 5d3470946..b1967216e 100644
--- a/postfix/html/proxymap.8.html
+++ b/postfix/html/proxymap.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/qmgr.8.html b/postfix/html/qmgr.8.html
index 20cc1490e..3e6249e74 100644
--- a/postfix/html/qmgr.8.html
+++ b/postfix/html/qmgr.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/qmqp-sink.1.html b/postfix/html/qmqp-sink.1.html
index df9b85812..83feecdc3 100644
--- a/postfix/html/qmqp-sink.1.html
+++ b/postfix/html/qmqp-sink.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/qmqp-source.1.html b/postfix/html/qmqp-source.1.html
index 9d989bcd5..c5815700d 100644
--- a/postfix/html/qmqp-source.1.html
+++ b/postfix/html/qmqp-source.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/qmqpd.8.html b/postfix/html/qmqpd.8.html
index 9bdee711d..46776a726 100644
--- a/postfix/html/qmqpd.8.html
+++ b/postfix/html/qmqpd.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
@@ -169,7 +169,7 @@ QMQPD(8)                                                              QMQPD(8)
               The <a href="master.5.html">master.cf</a> service name of a Postfix daemon process.
 
 <b><a name="see_also">SEE ALSO</a></b>
-       <a href="http://cr.yp.to/proto/qmqp.html">http://cr.yp.to/proto/qmqp.html</a>, QMQP protocol
+       <a href="https://cr.yp.to/proto/qmqp.html">https://cr.yp.to/proto/qmqp.html</a>, QMQP protocol
        <a href="cleanup.8.html">cleanup(8)</a>, message canonicalization
        <a href="master.8.html">master(8)</a>, process manager
        <a href="postlogd.8.html">postlogd(8)</a>, Postfix logging
diff --git a/postfix/html/qshape.1.html b/postfix/html/qshape.1.html
index 43c85fbef..56ad3c1b6 100644
--- a/postfix/html/qshape.1.html
+++ b/postfix/html/qshape.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/regexp_table.5.html b/postfix/html/regexp_table.5.html
index 4f65ee66f..e3798eea8 100644
--- a/postfix/html/regexp_table.5.html
+++ b/postfix/html/regexp_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/relocated.5.html b/postfix/html/relocated.5.html
index 358e08746..3ce107419 100644
--- a/postfix/html/relocated.5.html
+++ b/postfix/html/relocated.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/scache.8.html b/postfix/html/scache.8.html
index a569795c5..5d32a2bf2 100644
--- a/postfix/html/scache.8.html
+++ b/postfix/html/scache.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/sendmail.1.html b/postfix/html/sendmail.1.html
index 3977355eb..4645b733a 100644
--- a/postfix/html/sendmail.1.html
+++ b/postfix/html/sendmail.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/showq.8.html b/postfix/html/showq.8.html
index 737149dd3..537af081a 100644
--- a/postfix/html/showq.8.html
+++ b/postfix/html/showq.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/smtp-sink.1.html b/postfix/html/smtp-sink.1.html
index ac7ae4a16..c2f644a2f 100644
--- a/postfix/html/smtp-sink.1.html
+++ b/postfix/html/smtp-sink.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/smtp-source.1.html b/postfix/html/smtp-source.1.html
index 26a1be0b3..1e5d9d521 100644
--- a/postfix/html/smtp-source.1.html
+++ b/postfix/html/smtp-source.1.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/smtp.8.html b/postfix/html/smtp.8.html
index 96eac7890..945bd926d 100644
--- a/postfix/html/smtp.8.html
+++ b/postfix/html/smtp.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/smtpd.8.html b/postfix/html/smtpd.8.html
index f4d9341d8..52ebdf599 100644
--- a/postfix/html/smtpd.8.html
+++ b/postfix/html/smtpd.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/socketmap_table.5.html b/postfix/html/socketmap_table.5.html
index 1ed39873d..ef5115d2b 100644
--- a/postfix/html/socketmap_table.5.html
+++ b/postfix/html/socketmap_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
@@ -68,7 +68,7 @@ SOCKETMAP_TABLE(5)                                          SOCKETMAP_TABLE(5)
        because neither the connection nor the server are authenticated.
 
 <b><a name="see_also">SEE ALSO</a></b>
-       <a href="http://cr.yp.to/proto/netstrings.txt">http://cr.yp.to/proto/netstrings.txt</a>, netstring definition
+       <a href="https://cr.yp.to/proto/netstrings.txt">https://cr.yp.to/proto/netstrings.txt</a>, netstring definition
        <a href="postconf.1.html">postconf(1)</a>, Postfix supported lookup tables
        <a href="postmap.1.html">postmap(1)</a>, Postfix lookup table manager
        <a href="regexp_table.5.html">regexp_table(5)</a>, format of regular expression tables
diff --git a/postfix/html/spawn.8.html b/postfix/html/spawn.8.html
index 6d4706c2b..de957a46f 100644
--- a/postfix/html/spawn.8.html
+++ b/postfix/html/spawn.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/sqlite_table.5.html b/postfix/html/sqlite_table.5.html
index 08c48a43b..56836d43c 100644
--- a/postfix/html/sqlite_table.5.html
+++ b/postfix/html/sqlite_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/tcp_table.5.html b/postfix/html/tcp_table.5.html
index d46892c85..8311ac4ab 100644
--- a/postfix/html/tcp_table.5.html
+++ b/postfix/html/tcp_table.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/tlsmgr.8.html b/postfix/html/tlsmgr.8.html
index a5f877c64..f4b2f7b22 100644
--- a/postfix/html/tlsmgr.8.html
+++ b/postfix/html/tlsmgr.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/tlsproxy.8.html b/postfix/html/tlsproxy.8.html
index feb4f5591..4737654e8 100644
--- a/postfix/html/tlsproxy.8.html
+++ b/postfix/html/tlsproxy.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/trace.8.html b/postfix/html/trace.8.html
index 33ffe62f8..603ca0f53 100644
--- a/postfix/html/trace.8.html
+++ b/postfix/html/trace.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/transport.5.html b/postfix/html/transport.5.html
index bbe740bd5..0b5a10175 100644
--- a/postfix/html/transport.5.html
+++ b/postfix/html/transport.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/trivial-rewrite.8.html b/postfix/html/trivial-rewrite.8.html
index 5b2221dca..067c8bf82 100644
--- a/postfix/html/trivial-rewrite.8.html
+++ b/postfix/html/trivial-rewrite.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/verify.8.html b/postfix/html/verify.8.html
index 8254a7ceb..1cc88732c 100644
--- a/postfix/html/verify.8.html
+++ b/postfix/html/verify.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/virtual.5.html b/postfix/html/virtual.5.html
index bb9ff9968..f9f1b7362 100644
--- a/postfix/html/virtual.5.html
+++ b/postfix/html/virtual.5.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/html/virtual.8.html b/postfix/html/virtual.8.html
index 299eec1b6..880018fcb 100644
--- a/postfix/html/virtual.8.html
+++ b/postfix/html/virtual.8.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 <html> <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/man/man5/postconf.5 b/postfix/man/man5/postconf.5
index e10a94bdc..cb314735f 100644
--- a/postfix/man/man5/postconf.5
+++ b/postfix/man/man5/postconf.5
@@ -1844,11 +1844,16 @@ defer_transports = smtp
 .SH delay_logging_resolution_limit (default: 2)
 The maximal number of digits after the decimal point when logging
 sub\-second delay values.  Specify a number in the range 0..6.
-.PP
-Large delay values are rounded off to an integral number of seconds;
-delay values below the delay_logging_resolution_limit are logged
-as "0", and delay values under 100s are logged with at most two\-digit
-precision.
+.IP \(bu
+Delays >= 100s are rounded off to an integral number of
+seconds.
+.IP \(bu
+Delays < 10^\-$delay_logging_resolution_limit are
+rounded off to "0".
+.IP \(bu
+Other delays are rounded off to two significant digits,
+or fewer if the result would exceed the delay_resolution_limit.
+.br
 .PP
 The format of the "delays=a/b/c/d" logging is as follows:
 .IP \(bu
@@ -2066,7 +2071,7 @@ when converting UTF\-8 domain names to/from the ASCII form that is
 used for DNS lookups. Specify "yes" for compatibility with Postfix
 <= 3.1 (not recommended). This affects the conversion of domain
 names that contain for example the German sz and the Greek zeta.
-See http://unicode.org/cldr/utility/idna.jsp for more examples.
+See https://unicode.org/cldr/utility/idna.jsp for more examples.
 .PP
 This feature is available in Postfix 3.2 and later.
 .SH enable_long_queue_ids (default: no)
diff --git a/postfix/man/man5/socketmap_table.5 b/postfix/man/man5/socketmap_table.5
index e5671ddbc..e4ec27e67 100644
--- a/postfix/man/man5/socketmap_table.5
+++ b/postfix/man/man5/socketmap_table.5
@@ -76,7 +76,7 @@ because neither the connection nor the server are authenticated.
 .SH "SEE ALSO"
 .na
 .nf
-http://cr.yp.to/proto/netstrings.txt, netstring definition
+https://cr.yp.to/proto/netstrings.txt, netstring definition
 postconf(1), Postfix supported lookup tables
 postmap(1), Postfix lookup table manager
 regexp_table(5), format of regular expression tables
diff --git a/postfix/man/man8/qmqpd.8 b/postfix/man/man8/qmqpd.8
index 0f0a82bc7..e35da63aa 100644
--- a/postfix/man/man8/qmqpd.8
+++ b/postfix/man/man8/qmqpd.8
@@ -173,7 +173,7 @@ The master.cf service name of a Postfix daemon process.
 .SH "SEE ALSO"
 .na
 .nf
-http://cr.yp.to/proto/qmqp.html, QMQP protocol
+https://cr.yp.to/proto/qmqp.html, QMQP protocol
 cleanup(8), message canonicalization
 master(8), process manager
 postlogd(8), Postfix logging
diff --git a/postfix/mantools/make_soho_readme b/postfix/mantools/make_soho_readme
index 6b1c7b851..3f766f816 100755
--- a/postfix/mantools/make_soho_readme
+++ b/postfix/mantools/make_soho_readme
@@ -2,7 +2,7 @@
 
 cat <<'EOF'
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/mantools/makemanidx b/postfix/mantools/makemanidx
index 9b96250be..46de62c20 100755
--- a/postfix/mantools/makemanidx
+++ b/postfix/mantools/makemanidx
@@ -2,7 +2,7 @@
 
 cat <<EOF
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/mantools/man2html b/postfix/mantools/man2html
index aa9c88b1d..139e58a1e 100755
--- a/postfix/mantools/man2html
+++ b/postfix/mantools/man2html
@@ -12,7 +12,7 @@ do
 done
 
 echo "<!doctype html public \"-//W3C//DTD HTML 4.01 Transitional//EN\"
-        \"http://www.w3.org/TR/html4/loose.dtd\">
+        \"https://www.w3.org/TR/html4/loose.dtd\">
 <html> <head>
 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">
 <link rel='stylesheet' type='text/css' href='postfix-doc.css'>
diff --git a/postfix/mantools/postlink.sed b/postfix/mantools/postlink.sed
index c6bef2e70..88cc6c5a1 100755
--- a/postfix/mantools/postlink.sed
+++ b/postfix/mantools/postlink.sed
@@ -549,9 +549,9 @@ exec sed '
 
 	# Hyperlink URLs and RFC documents
 
-	s/\(http:\/\/[^ ,"()]*[^ ,"():;!?.]\)/<a href="\1">\1<\/a>/
+	s/\(https?:\/\/[^ ,"()]*[^ ,"():;!?.]\)/<a href="\1">\1<\/a>/
 	s/\(ftp:\/\/[^ ,"()]*[^ ,"():;!?.]\)/<a href="\1">\1<\/a>/
-	s/[[:<:]]RFC *\([1-9][0-9]*\)/<a href="http:\/\/www.faqs.org\/rfcs\/rfc\1.html">&<\/a>/
+	s/[[:<:]]RFC *\([1-9][0-9]*\)/<a href="https:\/\/www.faqs.org\/rfcs\/rfc\1.html">&<\/a>/
 
 	# Hyperlink phrases not in headers.
 
diff --git a/postfix/mantools/readme2html b/postfix/mantools/readme2html
index 7b4dd444c..a1ec24a6e 100755
--- a/postfix/mantools/readme2html
+++ b/postfix/mantools/readme2html
@@ -3,7 +3,7 @@
 # Crude script to convert plain READMEs to HTML
 
 echo '<!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/ADDRESS_CLASS_README.html b/postfix/proto/ADDRESS_CLASS_README.html
index 5deac1127..8fa0c3af4 100644
--- a/postfix/proto/ADDRESS_CLASS_README.html
+++ b/postfix/proto/ADDRESS_CLASS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/ADDRESS_REWRITING_README.html b/postfix/proto/ADDRESS_REWRITING_README.html
index 631a7d3c6..44fb2bdb4 100644
--- a/postfix/proto/ADDRESS_REWRITING_README.html
+++ b/postfix/proto/ADDRESS_REWRITING_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/ADDRESS_VERIFICATION_README.html b/postfix/proto/ADDRESS_VERIFICATION_README.html
index c09c3b6e5..de101e229 100644
--- a/postfix/proto/ADDRESS_VERIFICATION_README.html
+++ b/postfix/proto/ADDRESS_VERIFICATION_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -372,8 +372,8 @@ in forged email.  </p>
 </blockquote>
 
 <p> At some point in cyberspace/time, a list of frequently forged
-MAIL FROM domains could be found at
-http://www.monkeys.com/anti-spam/filtering/sender-domain-validate.in.  </p>
+MAIL FROM domains was archived at
+https://web.archive.org/web/20080526153208/http://www.monkeys.com/anti-spam/filtering/sender-domain-validate.in.  </p>
 
 <p> NOTE: One of the first things you might want to do is to turn
 on sender address verification for all your own domains. </p>
diff --git a/postfix/proto/BACKSCATTER_README.html b/postfix/proto/BACKSCATTER_README.html
index a1785399c..c07ab415f 100644
--- a/postfix/proto/BACKSCATTER_README.html
+++ b/postfix/proto/BACKSCATTER_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -385,7 +385,7 @@ is only a small example of message header patterns.  For a large
 collection of header and body patterns that recognize virus
 notification email, see
 https://web.archive.org/web/20100317123907/http://std.dkuug.dk/keld/virus/
-or http://www.t29.dk/antiantivirus.txt.  </p>
+or https://www.t29.dk/antiantivirus.txt.  </p>
 
 <blockquote>
 <pre>
diff --git a/postfix/proto/BASIC_CONFIGURATION_README.html b/postfix/proto/BASIC_CONFIGURATION_README.html
index eaa16ccb5..6b6f36f0f 100644
--- a/postfix/proto/BASIC_CONFIGURATION_README.html
+++ b/postfix/proto/BASIC_CONFIGURATION_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/BDAT_README.html b/postfix/proto/BDAT_README.html
index 31ef77ce6..48a661687 100644
--- a/postfix/proto/BDAT_README.html
+++ b/postfix/proto/BDAT_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/BUILTIN_FILTER_README.html b/postfix/proto/BUILTIN_FILTER_README.html
index 8eaeaa030..ceaf362b9 100644
--- a/postfix/proto/BUILTIN_FILTER_README.html
+++ b/postfix/proto/BUILTIN_FILTER_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -288,7 +288,7 @@ is queued, as described in the FILTER_README document. </p>
 <h2><a name="daily">Preventing daily mail status reports from being blocked </a></h2>
 
 <p>The following is quoted from Jim Seymour's Pflogsumm FAQ at
-http://jimsun.linxnet.com/downloads/pflogsumm-faq.txt. Pflogsumm
+https://jimsun.linxnet.com/downloads/pflogsumm-faq.txt. Pflogsumm
 is a program that analyzes Postfix logs, including the logging from
 rejected mail. If these logs contain text that was rejected by
 Postfix body_checks patterns, then the logging is also likely to
diff --git a/postfix/proto/CDB_README.html b/postfix/proto/CDB_README.html
index 51ef401c0..0654551d3 100644
--- a/postfix/proto/CDB_README.html
+++ b/postfix/proto/CDB_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -50,10 +50,10 @@ package.  </p>
 <ul>
 
 <li> <p> The original cdb library from Daniel Bernstein, available
-from http://cr.yp.to/cdb.html, and </p>
+from https://cr.yp.to/cdb.html, and </p>
 
 <li> <p> tinycdb (version 0.5 and later) from Michael Tokarev,
-available from http://www.corpit.ru/mjt/tinycdb.html. </p>
+available from https://www.corpit.ru/mjt/tinycdb.html. </p>
 
 </ul>
 
diff --git a/postfix/proto/COMPATIBILITY_README.html b/postfix/proto/COMPATIBILITY_README.html
index 9f8892757..801d0d9a5 100644
--- a/postfix/proto/COMPATIBILITY_README.html
+++ b/postfix/proto/COMPATIBILITY_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/CONNECTION_CACHE_README.html b/postfix/proto/CONNECTION_CACHE_README.html
index 79e5a94de..43265ad4f 100644
--- a/postfix/proto/CONNECTION_CACHE_README.html
+++ b/postfix/proto/CONNECTION_CACHE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/CONTENT_INSPECTION_README.html b/postfix/proto/CONTENT_INSPECTION_README.html
index e7349ba8f..85a84ef41 100644
--- a/postfix/proto/CONTENT_INSPECTION_README.html
+++ b/postfix/proto/CONTENT_INSPECTION_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -85,7 +85,7 @@ skills than writing a SPAM or virus killer. Postfix encourages the
 use of external filters and standard protocols because this allows
 you to choose the best MTA and the best content inspection software
 for your purpose.  Information about external content inspection
-software can be found on the Postfix website at http://www.postfix.org/,
+software can be found on the Postfix website at https://www.postfix.org/,
 and on the postfix-users@postfix.org mailing list. </p>
 
 </body>
diff --git a/postfix/proto/DATABASE_README.html b/postfix/proto/DATABASE_README.html
index e9d0c189c..42a54ac7c 100644
--- a/postfix/proto/DATABASE_README.html
+++ b/postfix/proto/DATABASE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/DB_README.html b/postfix/proto/DB_README.html
index c61723c9e..4b58b9f02 100644
--- a/postfix/proto/DB_README.html
+++ b/postfix/proto/DB_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -76,7 +76,7 @@ reasons these use DBM files instead. A problem with DBM files is
 that they can store only limited amounts of data. To build Postfix
 with
 Berkeley DB support you need to download and install the source
-code from http://www.oracle.com/database/berkeley-db/. </p>
+code from https://www.oracle.com/database/technologies/related/berkeleydb.html. </p>
 
 <p> Warning: some Linux system libraries use Berkeley DB, as do
 some third-party libraries such as SASL. If you compile Postfix
@@ -240,7 +240,7 @@ undefined reference to `pthread_mutex_trylock'
 </blockquote>
 
 <p> More information is available at
-http://www.oracle.com/database/berkeley-db/. </p>
+https://www.oracle.com/database/technologies/related/berkeleydb.html. </p>
 
 </body>
 
diff --git a/postfix/proto/DEBUG_README.html b/postfix/proto/DEBUG_README.html
index d522daa66..ad5e1dfb5 100644
--- a/postfix/proto/DEBUG_README.html
+++ b/postfix/proto/DEBUG_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/DEPRECATION_README.html b/postfix/proto/DEPRECATION_README.html
index 1ded55505..356d23230 100644
--- a/postfix/proto/DEPRECATION_README.html
+++ b/postfix/proto/DEPRECATION_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-       "http://www.w3.org/TR/html4/loose.dtd">
+       "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/DSN_README.html b/postfix/proto/DSN_README.html
index 4ff152e81..1dddc66a3 100644
--- a/postfix/proto/DSN_README.html
+++ b/postfix/proto/DSN_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/ETRN_README.html b/postfix/proto/ETRN_README.html
index d63bf6f46..49bf7fd98 100644
--- a/postfix/proto/ETRN_README.html
+++ b/postfix/proto/ETRN_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/FILTER_README.html b/postfix/proto/FILTER_README.html
index 85a2cafef..445df4583 100644
--- a/postfix/proto/FILTER_README.html
+++ b/postfix/proto/FILTER_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/FORWARD_SECRECY_README.html b/postfix/proto/FORWARD_SECRECY_README.html
index 21e659753..1218d06d6 100644
--- a/postfix/proto/FORWARD_SECRECY_README.html
+++ b/postfix/proto/FORWARD_SECRECY_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/INSTALL.html b/postfix/proto/INSTALL.html
index 50249b28d..2896b6b5c 100644
--- a/postfix/proto/INSTALL.html
+++ b/postfix/proto/INSTALL.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -977,7 +977,7 @@ Postfix (section 6).
 <p> If the command produces compiler error messages, it may be time
 to search the web or to ask the postfix-users@postfix.org mailing
 list, but be sure to search the mailing list archives first. Some
-mailing list archives are linked from http://www.postfix.org/. </p>
+mailing list archives are linked from https://www.postfix.org/. </p>
 
 <h2> <a name="5">5 - Porting Postfix to an unsupported system</a> </h2>
 
diff --git a/postfix/proto/IPV6_README.html b/postfix/proto/IPV6_README.html
index cb0703059..b69f8aaaf 100644
--- a/postfix/proto/IPV6_README.html
+++ b/postfix/proto/IPV6_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -36,8 +36,7 @@ address space is that it makes random network scanning impractical.
 
 <p> Postfix uses the same SMTP protocol over IPv6 as it already
 uses over the older IPv4 network, and does AAAA record lookups in
-the DNS in addition to the older A records.  Information about IPv6
-can be found at http://www.ipv6.org/. </p>
+the DNS in addition to the older A records. </p>
 
 <p> This document provides information on the following topics:
 </p>
@@ -348,8 +347,8 @@ TLS patch for Postfix.  </p>
 <li> <p> Dean Strik extended IPv6 support to platforms other than
 KAME and USAGI, updated the patch to keep up with Postfix development,
 and provided a combined IPv6 + TLS patch.  Information about his
-effort can be found on Dean Strik's Postfix website at
-http://www.ipnet6.org/postfix/. </p>
+effort is found in an archived copy of Dean Strik's Postfix website at
+https://web.archive.org/web/20080603102834/http://www.ipnet6.org/postfix/. </p>
 
 <li> <p> Wietse Venema took Dean Strik's IPv6 patch, merged it into
 Postfix 2.2, and took the opportunity to eliminate all IPv4-specific
diff --git a/postfix/proto/LDAP_README.html b/postfix/proto/LDAP_README.html
index 2e7a0cfd0..81ffc6d39 100644
--- a/postfix/proto/LDAP_README.html
+++ b/postfix/proto/LDAP_README.html
@@ -1,5 +1,5 @@
-<!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+s!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -84,9 +84,8 @@ command: </p>
 </pre>
 </blockquote>
 
-<p> If you're using the libraries from the UM distribution
-(http://www.umich.edu/~dirsvcs/ldap/ldap.html) or OpenLDAP
-(http://www.openldap.org), something like this in the top level of
+<p> If you're using the libraries from OpenLDAP
+(https://www.openldap.org), something like this in the top level of
 your Postfix source tree should work: </p>
 
 <blockquote>
diff --git a/postfix/proto/LINUX_README.html b/postfix/proto/LINUX_README.html
index 364196657..ef53e8365 100644
--- a/postfix/proto/LINUX_README.html
+++ b/postfix/proto/LINUX_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/LMDB_README.html b/postfix/proto/LMDB_README.html
index 05bfd3083..b9b3ca8ae 100644
--- a/postfix/proto/LMDB_README.html
+++ b/postfix/proto/LMDB_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/LOCAL_RECIPIENT_README.html b/postfix/proto/LOCAL_RECIPIENT_README.html
index 2cb3fb296..991c340cc 100644
--- a/postfix/proto/LOCAL_RECIPIENT_README.html
+++ b/postfix/proto/LOCAL_RECIPIENT_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/MAILDROP_README.html b/postfix/proto/MAILDROP_README.html
index 36eb900fb..c225feb6f 100644
--- a/postfix/proto/MAILDROP_README.html
+++ b/postfix/proto/MAILDROP_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/MAILLOG_README.html b/postfix/proto/MAILLOG_README.html
index 13c1091e8..a6082a5a0 100644
--- a/postfix/proto/MAILLOG_README.html
+++ b/postfix/proto/MAILLOG_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/MEMCACHE_README.html b/postfix/proto/MEMCACHE_README.html
index 31bca2a70..167b0e776 100644
--- a/postfix/proto/MEMCACHE_README.html
+++ b/postfix/proto/MEMCACHE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/MILTER_README.html b/postfix/proto/MILTER_README.html
index 9f9833bb4..a331c37da 100644
--- a/postfix/proto/MILTER_README.html
+++ b/postfix/proto/MILTER_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/MONGODB_README.html b/postfix/proto/MONGODB_README.html
index f5e1d5f54..e0c3542aa 100644
--- a/postfix/proto/MONGODB_README.html
+++ b/postfix/proto/MONGODB_README.html
@@ -1,4 +1,4 @@
-<!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN" "https://www.w3.org/TR/html4/loose.dtd">
 <html>
 <head>
 <title>Postfix MongoDB Howto</title>
diff --git a/postfix/proto/MULTI_INSTANCE_README.html b/postfix/proto/MULTI_INSTANCE_README.html
index 6359f04a3..57b5b701b 100644
--- a/postfix/proto/MULTI_INSTANCE_README.html
+++ b/postfix/proto/MULTI_INSTANCE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/MYSQL_README.html b/postfix/proto/MYSQL_README.html
index efbc293bf..e948b26ab 100644
--- a/postfix/proto/MYSQL_README.html
+++ b/postfix/proto/MYSQL_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -47,7 +47,7 @@ There is no need to recompile Postfix. </p>
 which can be obtained from: </p>
 
 <blockquote>
-    <p> http://www.mysql.com/downloads/ </p>
+    <p> https://www.mysql.com/downloads/ </p>
 </blockquote>
 
 <p> In order to build Postfix with mysql map support, you will need to add
diff --git a/postfix/proto/NFS_README.html b/postfix/proto/NFS_README.html
index e9af58f93..9c592fff2 100644
--- a/postfix/proto/NFS_README.html
+++ b/postfix/proto/NFS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/OVERVIEW.html b/postfix/proto/OVERVIEW.html
index 4b7dcabc6..1c52dd696 100644
--- a/postfix/proto/OVERVIEW.html
+++ b/postfix/proto/OVERVIEW.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/PACKAGE_README.html b/postfix/proto/PACKAGE_README.html
index 2350f5f1f..1ce418758 100644
--- a/postfix/proto/PACKAGE_README.html
+++ b/postfix/proto/PACKAGE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/PCRE_README.html b/postfix/proto/PCRE_README.html
index dd391b259..36db1eb65 100644
--- a/postfix/proto/PCRE_README.html
+++ b/postfix/proto/PCRE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -29,7 +29,7 @@ expression implementation that you find on many systems. </p>
 
 <p> A description of how to use pcre tables, including examples,
 is given in the pcre_table(5) manual page. Information about PCRE
-itself can be found at http://www.pcre.org/. </p>
+itself can be found at https://www.pcre.org/. </p>
 
 <h2>Using Postfix packages with PCRE support</h2>
 
diff --git a/postfix/proto/PGSQL_README.html b/postfix/proto/PGSQL_README.html
index 000805b87..a4c65741b 100644
--- a/postfix/proto/PGSQL_README.html
+++ b/postfix/proto/PGSQL_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/POSTSCREEN_3_5_README.html b/postfix/proto/POSTSCREEN_3_5_README.html
index 36dc21e34..6feaf09d1 100644
--- a/postfix/proto/POSTSCREEN_3_5_README.html
+++ b/postfix/proto/POSTSCREEN_3_5_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <head>
 
diff --git a/postfix/proto/POSTSCREEN_README.html b/postfix/proto/POSTSCREEN_README.html
index afd5cd3f1..ebe610d68 100644
--- a/postfix/proto/POSTSCREEN_README.html
+++ b/postfix/proto/POSTSCREEN_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <head>
 
@@ -64,8 +64,8 @@ worms or viruses with easy-to-recognize signatures. </p>
 
 <li> <p> The fourth layer provides heavy-weight content inspection
 with external content filters. Typical examples are <a
-href="http://www.ijs.si/software/amavisd/">Amavisd-new</a>, <a
-href="http://spamassassin.apache.org/">SpamAssassin</a>, and <a
+href="https://www.ijs.si/software/amavisd/">Amavisd-new</a>, <a
+href="https://spamassassin.apache.org/">SpamAssassin</a>, and <a
 href="MILTER_README.html">Milter applications</a>. </p>
 
 </ul>
@@ -1201,7 +1201,7 @@ that decrypts/encrypts the sessions for multiple SMTP clients. </p>
 
 <p> The tlsproxy(8) implementation led to the discovery of a "new"
 class of vulnerability (<a
-href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0411"
+href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0411"
 >CVE-2011-0411</a>) that affected multiple implementations of SMTP,
 POP, IMAP, NNTP, and FTP over TLS. </p>
 
diff --git a/postfix/proto/QSHAPE_README.html b/postfix/proto/QSHAPE_README.html
index 27a9a17ac..4bcddd996 100644
--- a/postfix/proto/QSHAPE_README.html
+++ b/postfix/proto/QSHAPE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -323,9 +323,7 @@ Users list.  Congestion was reported with the
 "active" and "incoming" queues
 large and not shrinking despite very large delivery agent
 process limits.  The thread is archived at:
-http://groups.google.com/groups?threadm=c0b7js$2r65$1@FreeBSD.csie.NCTU.edu.tw
-and
-http://archives.neohapsis.com/archives/postfix/2004-02/thread.html#1371
+https://web.archive.org/web/20120227170207/http://archives.neohapsis.com/archives/postfix/2004-02/thread.html#1371
 </p>
 
 <p> Using an older version of qshape(1) it was quickly determined
diff --git a/postfix/proto/README b/postfix/proto/README
index b1db3e429..9d761454c 100644
--- a/postfix/proto/README
+++ b/postfix/proto/README
@@ -21,7 +21,7 @@ configuration parameters, README file names, RFC documents, Postfix
 address class names, and URLs.  Therefore you should not hyperlink
 those elements yourself.
 
-- URLs (such as "http://www.example.com") cannot contain quote, comma,
+- URLs (such as "https://www.example.com") cannot contain quote, comma,
 or space characters. 
 
 - An URL that appears at the end of a line must be followed by one
diff --git a/postfix/proto/RESTRICTION_CLASS_README.html b/postfix/proto/RESTRICTION_CLASS_README.html
index 6e9b8bff2..cbe9115d1 100644
--- a/postfix/proto/RESTRICTION_CLASS_README.html
+++ b/postfix/proto/RESTRICTION_CLASS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/SASL_README.html b/postfix/proto/SASL_README.html
index e19bb33c6..d50fc840f 100644
--- a/postfix/proto/SASL_README.html
+++ b/postfix/proto/SASL_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <head>
 
@@ -178,7 +178,7 @@ later. </p>
 <p> Dovecot is a POP/IMAP server that has its own configuration to
 authenticate POP/IMAP clients. When the Postfix SMTP server uses
 Dovecot SASL, it reuses parts of this configuration.  Consult the
-<a href="http://wiki.dovecot.org">Dovecot documentation</a> for how
+<a href="https://wiki.dovecot.org">Dovecot documentation</a> for how
 to configure and operate the Dovecot authentication server.  </p>
 
 <h4><a name="server_dovecot_comm">Postfix to Dovecot SASL communication</a></h4>
@@ -1085,7 +1085,7 @@ to add the above attribute. </p>
 <strong>Note</strong>
 
 <p> Read the chapter "Using SASL" in the <a
-href="http://www.openldap.org/doc/admin">OpenLDAP Admin Guide</a>
+href="https://www.openldap.org/doc/admin">OpenLDAP Admin Guide</a>
 for more detailed instructions to set up SASL authentication in
 OpenLDAP. </p>
 
@@ -1575,7 +1575,7 @@ encoded authentication information: </p>
 <p> The <strong>mmencode</strong> command is part of the metamail
 software. </p>
 
-<li> <p> Using Perl <b>MIME::Base64</b> (from http://www.cpan.org/): </p>
+<li> <p> Using Perl <b>MIME::Base64</b> (from https://www.cpan.org/): </p>
 
 <blockquote>
 <pre>
@@ -1597,7 +1597,7 @@ password:
 </blockquote>
 
 <p> The <strong>gen-auth</strong> Perl script was written by John
-Jetmore and can be found at http://jetmore.org/john/code/gen-auth. </p>
+Jetmore and can be found at https://jetmore.org/john/code/gen-auth. </p>
 
 </ul>
 
@@ -2201,7 +2201,7 @@ it unless you are forced to. The makers of Cyrus SASL write: </p>
 
 <blockquote> <i> This library is being deprecated and applications
 should transition to using the SASLv2 library</i> (source: <a
-href="http://www.cyrusimap.org/download.html">Project Cyrus:
+href="https://www.cyrusimap.org/download.html">Project Cyrus:
 Downloads</a>). </blockquote>
 
 <p> If you still need to set it up, here's a quick rundown: </p>
diff --git a/postfix/proto/SCHEDULER_README.html b/postfix/proto/SCHEDULER_README.html
index effa1abe8..b77800a31 100644
--- a/postfix/proto/SCHEDULER_README.html
+++ b/postfix/proto/SCHEDULER_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-	"http://www.w3.org/TR/html4/loose.dtd">
+	"https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/SMTPD_ACCESS_README.html b/postfix/proto/SMTPD_ACCESS_README.html
index 971f6cd44..2655ef607 100644
--- a/postfix/proto/SMTPD_ACCESS_README.html
+++ b/postfix/proto/SMTPD_ACCESS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -57,7 +57,7 @@ Mail servers happily forwarded mail on behalf of anyone towards
 any destination.  On today's Internet, spammers abuse servers that
 forward mail from arbitrary systems, and abused systems end up on
 anti-spammer denylists.  See, for example, the information on
-http://www.mail-abuse.org/ and other websites.  </p>
+https://www.spamhaus.org/ and other websites.  </p>
 
 <p> By default, Postfix has a moderately restrictive approach to
 mail relaying. Postfix forwards mail only from clients in trusted
diff --git a/postfix/proto/SMTPD_POLICY_README.html b/postfix/proto/SMTPD_POLICY_README.html
index b249c8099..fae35e141 100644
--- a/postfix/proto/SMTPD_POLICY_README.html
+++ b/postfix/proto/SMTPD_POLICY_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -32,7 +32,7 @@ can be found in the Postfix source code, in the directory
 examples/smtpd-policy. </p>
 
 <p> Another example of policy delegation is the SPF policy server
-at https://web.archive.org/web/20190221142057/http://www.openspf.org/Software.  </p>
+at http://www.open-spf.org/Software/  </p>
 
 <p> Policy delegation is now the preferred method for adding policies
 to Postfix. It's much easier to develop a new feature in few lines
@@ -480,7 +480,7 @@ different default actions with different SMTP status codes or text:
 4         reject_unauth_destination
 5         check_policy_service {
 6           inet:host:port1, 
-7           { default_action = 451 4.3.5 See http://www.example.com/support1 }
+7           { default_action = 451 4.3.5 See https://www.example.com/support1 }
 8         } 
 9         ...
 </pre>
@@ -489,10 +489,12 @@ different default actions with different SMTP status codes or text:
 <h2><a name="greylist">Example: greylist policy server</a></h2>
 
 <p> Greylisting is a defense against junk email that is described at
-http://www.greylisting.org/. The idea was discussed on the
+https://www.greylisting.org/. The idea was discussed on the
 postfix-users mailing list <a
-href="http://archives.neohapsis.com/archives/postfix/2002-03/0846.html">
-one year before it was popularized</a>. </p>
+href="https://marc.info/?l=postfix-users&m=101594914212564&w=2">
+one year before it was popularized</a> (<a
+href="http://archives.neohapsis.com/archives/postfix/2002-03/0846.html">alternative
+version</a>). </p>
 
 <p> The file examples/smtpd-policy/greylist.pl in the Postfix source
 tree implements a simplified greylist policy server. This server
diff --git a/postfix/proto/SMTPD_PROXY_README.html b/postfix/proto/SMTPD_PROXY_README.html
index 83ce3eb77..12543b022 100644
--- a/postfix/proto/SMTPD_PROXY_README.html
+++ b/postfix/proto/SMTPD_PROXY_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/SMTPUTF8_README.html b/postfix/proto/SMTPUTF8_README.html
index 2fa5e7db2..5948f85fc 100644
--- a/postfix/proto/SMTPUTF8_README.html
+++ b/postfix/proto/SMTPUTF8_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -376,7 +376,7 @@ Firefox and Chrome web browsers. Specify "enable_idna2003_compatibility
 
 <p> This affects the conversion of domain names that contain for
 example the German sz (ß) and the Greek zeta (ς). See
-http://unicode.org/cldr/utility/idna.jsp for more examples. </p>
+https://unicode.org/cldr/utility/idna.jsp for more examples. </p>
 
 <h2> <a name="credits">Credits</a> </h2>
 
diff --git a/postfix/proto/SQLITE_README.html b/postfix/proto/SQLITE_README.html
index 2388ab8f6..76a418d9f 100644
--- a/postfix/proto/SQLITE_README.html
+++ b/postfix/proto/SQLITE_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -31,7 +31,7 @@ access(5) table, and one for an aliases(5) table if you want.  </p>
 which can be obtained from: </p>
 
 <blockquote>
-    <p> http://www.sqlite.org/ </p>
+    <p> https://www.sqlite.org/ </p>
 </blockquote>
 
 <p> In order to build Postfix with sqlite map support, you will
diff --git a/postfix/proto/STANDARD_CONFIGURATION_README.html b/postfix/proto/STANDARD_CONFIGURATION_README.html
index 6c592479a..f89ffc905 100644
--- a/postfix/proto/STANDARD_CONFIGURATION_README.html
+++ b/postfix/proto/STANDARD_CONFIGURATION_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -66,7 +66,7 @@ Internet hostname</a>
 <p> Postfix should work out of the box without change on a stand-alone
 machine that has direct Internet access.  At least, that is how
 Postfix installs when you download the Postfix source code via
-http://www.postfix.org/. </p>
+https://www.postfix.org/. </p>
 
 <p> You can use the command "<b>postconf -n</b>" to find out what
 settings are overruled by your main.cf. Besides a few pathname
diff --git a/postfix/proto/STRESS_README.html b/postfix/proto/STRESS_README.html
index 4935226d2..13087f539 100644
--- a/postfix/proto/STRESS_README.html
+++ b/postfix/proto/STRESS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -111,7 +111,7 @@ Oct  3 20:39:27 spike postfix/master[28905]: warning: to avoid this
  condition, increase the process count in master.cf or reduce the
  service time per client
 Oct  3 20:39:27 spike postfix/master[28905]: warning: see
-  <a href="http://www.postfix.org/STRESS_README.html">http://www.postfix.org/STRESS_README.html</a> for examples of
+  <a href="https://www.postfix.org/STRESS_README.html">https://www.postfix.org/STRESS_README.html</a> for examples of
   stress-adapting configuration settings
 </pre>
 
@@ -401,7 +401,7 @@ described below.  </p>
 <li> <p> You can automatically turn on the above overload measure
 with Postfix 2.5 and later, or with earlier releases that contain
 the stress-adaptive behavior source code patch from the mirrors
-listed at http://www.postfix.org/download.html. Simply replace line
+listed at https://www.postfix.org/download.html. Simply replace line
 above 8 with: </p>
 
 <pre>
@@ -419,7 +419,7 @@ in section "<a href="#adapt">Automatic stress-adaptive behavior</a>".
 <p> See the section "<a href="#adapt">Automatic stress-adaptive
 behavior</a>" if you are running Postfix version 2.5 or later, or
 if you have applied the source code patch for stress-adaptive
-behavior from the mirrors listed at http://www.postfix.org/download.html.
+behavior from the mirrors listed at https://www.postfix.org/download.html.
 </p>
 
 <p> The following measures can be applied temporarily during overload.
diff --git a/postfix/proto/TLSRPT_README.html b/postfix/proto/TLSRPT_README.html
index ce1f16a16..76c448539 100644
--- a/postfix/proto/TLSRPT_README.html
+++ b/postfix/proto/TLSRPT_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-  "http://www.w3.org/TR/html4/loose.dtd">
+  "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/TLS_LEGACY_README.html b/postfix/proto/TLS_LEGACY_README.html
index 1cdbd1720..401fd502c 100644
--- a/postfix/proto/TLS_LEGACY_README.html
+++ b/postfix/proto/TLS_LEGACY_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/TLS_README.html b/postfix/proto/TLS_README.html
index d6fe51b52..36da089f7 100644
--- a/postfix/proto/TLS_README.html
+++ b/postfix/proto/TLS_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -2214,9 +2214,9 @@ the applicability of verified TLS on the public Internet. </p>
 related features were new with Postfix 2.3, the issue was well
 understood before Postfix 1.0, when Lutz J&auml;nicke was designing
 the first unofficial Postfix TLS patch. See his original post <a
-href="http://www.imc.org/ietf-apps-tls/mail-archive/msg00304.html">http://www.imc.org/ietf-apps-tls/mail-archive/msg00304.html</a>
+href="https://web.archive.org/web/20070816181658/http://www.imc.org/ietf-apps-tls/mail-archive/msg00304.html">https://web.archive.org/web/20070816181658/http://www.imc.org/ietf-apps-tls/mail-archive/msg00304.html</a>
 and the first response <a
-href="http://www.imc.org/ietf-apps-tls/mail-archive/msg00305.html">http://www.imc.org/ietf-apps-tls/mail-archive/msg00305.html</a>.
+href="https://web.archive.org/web/20070807073846/http://www.imc.org/ietf-apps-tls/mail-archive/msg00305.html">https://web.archive.org/web/20070807073846/http://www.imc.org/ietf-apps-tls/mail-archive/msg00305.html</a>.
 The problem is not even unique to SMTP or even TLS, similar issues exist
 for secure connections via aliases for HTTPS and Kerberos. SMTP merely
 uses indirect naming (via MX records) more frequently. </p>
@@ -2738,7 +2738,7 @@ an OpenSSL library that could be vulnerable. </p>
 
 <p> Note: Disabling LEGACY_SERVER_CONNECT is not wise at this
 time, lots of servers are still unpatched and Postfix is <a
-href="http://www.postfix.org/wip.html#tls-renegotiation">not
+href="https://www.postfix.org/wip.html#tls-renegotiation">not
 significantly vulnerable</a> to the renegotiation issue in the TLS
 protocol. </p>
 
@@ -3264,7 +3264,7 @@ you can start using Postfix as soon as it is installed.  </p>
 <h2> <a name="problems"> Reporting problems </a> </h2>
 
 <p> Problems are preferably reported via &lt;postfix-users@postfix.org&gt;.
-See http://www.postfix.org/lists.html for subscription information.
+See https://www.postfix.org/lists.html for subscription information.
 When reporting a problem, please be thorough in the report.  Patches,
 when possible, are greatly appreciated too. </p>
 
diff --git a/postfix/proto/TUNING_README.html b/postfix/proto/TUNING_README.html
index 197deb55e..98c3e213d 100644
--- a/postfix/proto/TUNING_README.html
+++ b/postfix/proto/TUNING_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -685,7 +685,7 @@ kernel.threads-max=2048
 
 <li> <p> Solaris kernel parameters can be specified in /etc/system,
 as described in the <a
-href="http://www.science.uva.nl/pub/solaris/solaris2.html#q3.48">Solaris
+href="https://web.archive.org/web/20070214110126/http://www.science.uva.nl/pub/solaris/solaris2.html#q3.48">Solaris
 FAQ</a> entry titled "How can I increase the number of file
 descriptors per process?" </p>
 
diff --git a/postfix/proto/UUCP_README.html b/postfix/proto/UUCP_README.html
index daa9cdb72..a63771056 100644
--- a/postfix/proto/UUCP_README.html
+++ b/postfix/proto/UUCP_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -28,7 +28,7 @@ see the following guides: </p>
 <ul>
 
 <li> Jim Seymour's guide for using UUCP over TCP at
-http://jimsun.LinxNet.com/jdp/uucp_over_tcp/index.html,
+https://jimsun.LinxNet.com/jdp/uucp_over_tcp/index.html,
 
 <li> Craig Sanders's guide for SSL-encrypted UUCP over TCP
 using stunnel at http://taz.net.au/postfix/uucp/.
diff --git a/postfix/proto/VERP_README.html b/postfix/proto/VERP_README.html
index 722b6f59a..7313dd2fe 100644
--- a/postfix/proto/VERP_README.html
+++ b/postfix/proto/VERP_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
@@ -42,7 +42,7 @@ address without requiring the list owner to parse bounce messages.
 </p>
 
 <p> The VERP concept was popularized by the qmail MTA and by the ezmlm
-mailing list manager.  See http://cr.yp.to/proto/verp.txt for the
+mailing list manager.  See https://cr.yp.to/proto/verp.txt for the
 ideas behind this concept. </p>
 
 <p> Topics covered in this document: </p>
diff --git a/postfix/proto/VIRTUAL_README.html b/postfix/proto/VIRTUAL_README.html
index 9710138cf..d42efcc18 100644
--- a/postfix/proto/VIRTUAL_README.html
+++ b/postfix/proto/VIRTUAL_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/XCLIENT_README.html b/postfix/proto/XCLIENT_README.html
index f6b7801fb..36a42bc91 100644
--- a/postfix/proto/XCLIENT_README.html
+++ b/postfix/proto/XCLIENT_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/XFORWARD_README.html b/postfix/proto/XFORWARD_README.html
index ad380a461..63c1678d3 100644
--- a/postfix/proto/XFORWARD_README.html
+++ b/postfix/proto/XFORWARD_README.html
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/postconf.html.prolog b/postfix/proto/postconf.html.prolog
index 04a9ef279..cb91af190 100644
--- a/postfix/proto/postconf.html.prolog
+++ b/postfix/proto/postconf.html.prolog
@@ -1,5 +1,5 @@
 <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
-        "http://www.w3.org/TR/html4/loose.dtd">
+        "https://www.w3.org/TR/html4/loose.dtd">
 
 <html>
 
diff --git a/postfix/proto/postconf.proto b/postfix/proto/postconf.proto
index 9ce5b6eab..7bb61c6f6 100644
--- a/postfix/proto/postconf.proto
+++ b/postfix/proto/postconf.proto
@@ -10864,10 +10864,18 @@ DNS lookup and increases the maximal inbound delivery rate. </p>
 <p> The maximal number of digits after the decimal point when logging
 sub-second delay values.  Specify a number in the range 0..6.  </p>
 
-<p> Large delay values are rounded off to an integral number of seconds;
-delay values below the delay_logging_resolution_limit are logged
-as "0", and delay values under 100s are logged with at most two-digit
-precision.  </p>
+<ul>
+
+<li> <p> Delays &ge; 100s are rounded off to an integral number of
+seconds. </p>
+
+<li> <p> Delays &lt; 10^-$delay_logging_resolution_limit are
+rounded off to "0".  </p>
+
+<li> <p> Other delays are rounded off to two significant digits,
+or fewer if the result would exceed the delay_resolution_limit. </p>
+
+</ul>
 
 <p> The format of the "delays=a/b/c/d" logging is as follows: </p>
 
@@ -17721,7 +17729,7 @@ when converting UTF-8 domain names to/from the ASCII form that is
 used for DNS lookups. Specify "yes" for compatibility with Postfix
 &le; 3.1 (not recommended). This affects the conversion of domain
 names that contain for example the German sz and the Greek zeta.
-See http://unicode.org/cldr/utility/idna.jsp for more examples.
+See https://unicode.org/cldr/utility/idna.jsp for more examples.
 </p>
 
 <p> This feature is available in Postfix 3.2 and later.  </p>
diff --git a/postfix/proto/socketmap_table b/postfix/proto/socketmap_table
index 52d1f4705..305afb1ee 100644
--- a/postfix/proto/socketmap_table
+++ b/postfix/proto/socketmap_table
@@ -60,7 +60,7 @@
 #	This map cannot be used for security-sensitive information,
 #	because neither the connection nor the server are authenticated.
 # SEE ALSO
-#	http://cr.yp.to/proto/netstrings.txt, netstring definition
+#	https://cr.yp.to/proto/netstrings.txt, netstring definition
 #	postconf(1), Postfix supported lookup tables
 #	postmap(1), Postfix lookup table manager
 #	regexp_table(5), format of regular expression tables
diff --git a/postfix/proto/stop.double-history b/postfix/proto/stop.double-history
index e35b3d4da..aa512908d 100644
--- a/postfix/proto/stop.double-history
+++ b/postfix/proto/stop.double-history
@@ -139,3 +139,7 @@ proto  proto mysql_table proto pgsql_table proto ldap_table
  pipe pipe c postfix postfix c postscreen postscreen_dnsbl c 
  qmgr qmgr_entry c qmqpd qmqpd_peer c smtp smtp h 
  Piekert File tlsproxy tlsproxy c
+ dns dns h examples smtpd policy README SPF html index html 
+ postfix postfix c proto ADDRESS_CLASS_README html 
+proto  proto socketmap_table qmqpd qmqpd c tls tls_misc c 
+ proto socketmap_table qmqpd qmqpd c tls tls_misc c 
diff --git a/postfix/proto/stop.spell-history b/postfix/proto/stop.spell-history
index 3a57097ec..4b29774ad 100644
--- a/postfix/proto/stop.spell-history
+++ b/postfix/proto/stop.spell-history
@@ -87,3 +87,5 @@ Antonin
 Verrier
 unescaped
 dereferenced
+MEMCACHE
+sed
diff --git a/postfix/proto/stop.spell-proto-html b/postfix/proto/stop.spell-proto-html
index 504363680..4ca883f29 100644
--- a/postfix/proto/stop.spell-proto-html
+++ b/postfix/proto/stop.spell-proto-html
@@ -389,3 +389,8 @@ Qsts
 gmail
 backupmx
 noreply
+DTD
+TR
+berkeleydb
+doctype
+dtd
diff --git a/postfix/src/dns/dns.h b/postfix/src/dns/dns.h
index a26108941..aeec149e9 100644
--- a/postfix/src/dns/dns.h
+++ b/postfix/src/dns/dns.h
@@ -88,7 +88,7 @@
 
  /*-
   * TLSA: https://tools.ietf.org/html/rfc6698#section-7.1
-  * RRSIG: http://tools.ietf.org/html/rfc4034#section-3
+  * RRSIG: https://tools.ietf.org/html/rfc4034#section-3
   *
   * We don't request RRSIG, but we get it "for free" when we send the DO-bit.
   */
diff --git a/postfix/src/global/mail_version.h b/postfix/src/global/mail_version.h
index 95ff70c9d..9af66613a 100644
--- a/postfix/src/global/mail_version.h
+++ b/postfix/src/global/mail_version.h
@@ -20,7 +20,7 @@
   * Patches change both the patchlevel and the release date. Snapshots have no
   * patchlevel; they change the release date only.
   */
-#define MAIL_RELEASE_DATE	"20241113"
+#define MAIL_RELEASE_DATE	"20241121"
 #define MAIL_VERSION_NUMBER	"3.10"
 
 #ifdef SNAPSHOT
diff --git a/postfix/src/master/master_avail.c b/postfix/src/master/master_avail.c
index 046503dce..6b0a09e2d 100644
--- a/postfix/src/master/master_avail.c
+++ b/postfix/src/master/master_avail.c
@@ -157,7 +157,7 @@ void    master_avail_listen(MASTER_SERV *serv)
 			 serv->ext_name, serv->name, serv->max_proc);
 		msg_warn("to avoid this condition, increase the process count "
 		      "in master.cf or reduce the service time per client");
-		msg_warn("see http://www.postfix.org/STRESS_README.html for "
+		msg_warn("see https://www.postfix.org/STRESS_README.html for "
 		      "examples of stress-adapting configuration settings");
 	    }
 	}
diff --git a/postfix/src/postfix/postfix.c b/postfix/src/postfix/postfix.c
index 057bed3c7..92f93c848 100644
--- a/postfix/src/postfix/postfix.c
+++ b/postfix/src/postfix/postfix.c
@@ -590,7 +590,7 @@ int     main(int argc, char **argv)
      */
     if (compat_level < compat_level_from_string(LAST_COMPAT_LEVEL, msg_panic)) {
 	msg_info("Postfix is using backwards-compatible default settings");
-	msg_info("See http://www.postfix.org/COMPATIBILITY_README.html "
+	msg_info("See https://www.postfix.org/COMPATIBILITY_README.html "
 		 "for details");
 	msg_info("To disable backwards compatibility use \"postconf "
 		 VAR_COMPAT_LEVEL "=%s\" and \"postfix reload\"",
diff --git a/postfix/src/qmqpd/qmqpd.c b/postfix/src/qmqpd/qmqpd.c
index 138ac64c9..ad2169d63 100644
--- a/postfix/src/qmqpd/qmqpd.c
+++ b/postfix/src/qmqpd/qmqpd.c
@@ -145,7 +145,7 @@
 /* .IP "\fBservice_name (read-only)\fR"
 /*	The master.cf service name of a Postfix daemon process.
 /* SEE ALSO
-/*	http://cr.yp.to/proto/qmqp.html, QMQP protocol
+/*	https://cr.yp.to/proto/qmqp.html, QMQP protocol
 /*	cleanup(8), message canonicalization
 /*	master(8), process manager
 /*	postlogd(8), Postfix logging
diff --git a/postfix/src/tls/tls_misc.c b/postfix/src/tls/tls_misc.c
index 6e578d286..2f4b5e3ba 100644
--- a/postfix/src/tls/tls_misc.c
+++ b/postfix/src/tls/tls_misc.c
@@ -1330,7 +1330,7 @@ TLS_SESS_STATE *tls_alloc_sess_context(int log_mask, const char *namaddr)
      * explicit assignments to initialize pointers.
      * 
      * See the C language FAQ item 5.17, or if you have time to burn,
-     * http://www.google.com/search?q=zero+bit+null+pointer
+     * https://www.google.com/search?q=zero+bit+null+pointer
      * 
      * However, it's OK to use memset() to zero integer values.
      */
diff --git a/postfix/src/util/midna_domain.c b/postfix/src/util/midna_domain.c
index bc016b637..5e9d6f8cb 100644
--- a/postfix/src/util/midna_domain.c
+++ b/postfix/src/util/midna_domain.c
@@ -57,7 +57,7 @@
 /*
 /*	midna_domain_pre_chroot() does some pre-chroot initialization.
 /* SEE ALSO
-/*	http://unicode.org/reports/tr46/ Unicode IDNA Compatibility processing
+/*	https://unicode.org/reports/tr46/ Unicode IDNA Compatibility processing
 /*	msg(3) diagnostics interface
 /* DIAGNOSTICS
 /*	Fatal errors: memory allocation problem.
diff --git a/postfix/src/util/netstring.c b/postfix/src/util/netstring.c
index 0edd80e1b..eccd1ba62 100644
--- a/postfix/src/util/netstring.c
+++ b/postfix/src/util/netstring.c
@@ -145,7 +145,7 @@
 /* .fi
 /*	The Secure Mailer license must be distributed with this software.
 /* SEE ALSO
-/*	http://cr.yp.to/proto/netstrings.txt, netstring definition
+/*	https://cr.yp.to/proto/netstrings.txt, netstring definition
 /* AUTHOR(S)
 /*	Wietse Venema
 /*	IBM T.J. Watson Research
diff --git a/postfix/src/xsasl/xsasl_dovecot_server.c b/postfix/src/xsasl/xsasl_dovecot_server.c
index 110d2a643..71fe09a52 100644
--- a/postfix/src/xsasl/xsasl_dovecot_server.c
+++ b/postfix/src/xsasl/xsasl_dovecot_server.c
@@ -124,7 +124,7 @@ static const NAME_MASK xsasl_dovecot_conf_sec_props[] = {
 
  /*
   * Security properties as specified in the Dovecot protocol. See
-  * http://wiki.dovecot.org/Authentication_Protocol.
+  * https://doc.dovecot.org/2.3/developer_manual/design/auth_protocol/
   */
 static const NAME_MASK xsasl_dovecot_serv_sec_props[] = {
     "plaintext", SEC_PROPS_NOPLAINTEXT,