===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/50.html,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -r1.26 -r1.27
--- www/50.html	2016/08/15 02:22:05	1.26
+++ www/50.html	2017/06/26 17:18:57	1.27
@@ -61,140 +61,140 @@
     <ul>
     <li>MSI interrupts for many devices, on those architectures which can
       support them (amd64, i386, sparc64 only so far).
-    <li>A new <a href="http://man.openbsd.org/?query=dma_alloc&amp;sektion=9">dma_alloc(9)</a> API makes it easier for kernel code to allocate
+    <li>A new <a href="https://man.openbsd.org/?query=dma_alloc&amp;sektion=9">dma_alloc(9)</a> API makes it easier for kernel code to allocate
       dma-safe memory.  Many drivers (especially network drivers) and
       subsystems (in particular scsi and the buffer cache) were adapted
       to use this.
     <li>As a result, big-memory support has been enabled on all possible
       architectures.
-    <li>The rather rare <a href="http://man.openbsd.org/?query=bce&amp;sektion=4">bce(4)</a> driver now copies mbufs all the time, to cope
+    <li>The rather rare <a href="https://man.openbsd.org/?query=bce&amp;sektion=4">bce(4)</a> driver now copies mbufs all the time, to cope
       with the hardware having a 1GB limit.
-    <li>Added <a href="http://man.openbsd.org/?query=hds&amp;sektion=4">hds(4)</a>, a driver for Hitachi Modular Storage SCSI devices.
-    <li>Added <a href="http://man.openbsd.org/?query=myx&amp;sektion=4">myx(4)</a>, a driver for the Myricom Myri-10G 10GB Ethernet devices.
-    <li>Added <a href="http://man.openbsd.org/?query=dfs&amp;sektion=4&amp;arch=macppc">dfs(4)</a>, a driver for Dynamic Frequency Switching on some macppc
+    <li>Added <a href="https://man.openbsd.org/?query=hds&amp;sektion=4">hds(4)</a>, a driver for Hitachi Modular Storage SCSI devices.
+    <li>Added <a href="https://man.openbsd.org/?query=myx&amp;sektion=4">myx(4)</a>, a driver for the Myricom Myri-10G 10GB Ethernet devices.
+    <li>Added <a href="https://man.openbsd.org/?query=dfs&amp;sektion=4&amp;arch=macppc">dfs(4)</a>, a driver for Dynamic Frequency Switching on some macppc
       systems.
-    <li><a href="http://man.openbsd.org/?query=cardbus&amp;sektion=4">cardbus(4)</a> and <a href="http://man.openbsd.org/?query=pcmcia&amp;sektion=4">pcmcia(4)</a> support on sgi.
+    <li><a href="https://man.openbsd.org/?query=cardbus&amp;sektion=4">cardbus(4)</a> and <a href="https://man.openbsd.org/?query=pcmcia&amp;sektion=4">pcmcia(4)</a> support on sgi.
     <li>Suspend/resume support on Loongson Yeelong laptops.
     </ul>
 <p>
 
 <li>Generic network stack improvements:
     <ul>
-    <li>Added support for sending Wake on Lan packets using <a href="http://man.openbsd.org/?query=arp&amp;sektion=8">arp(8)</a>.
-    <li>Permit turning Wake on Lan support on/off using <a href="http://man.openbsd.org/?query=ifconfig&amp;sektion=8">ifconfig(8)</a>.
-    <li>Added Wake on Lan support to <a href="http://man.openbsd.org/?query=xl&amp;sektion=4">xl(4)</a>, <a href="http://man.openbsd.org/?query=re&amp;sektion=4">re(4)</a>, and <a href="http://man.openbsd.org/?query=vr&amp;sektion=4">vr(4)</a>.
-    <li>Allow <a href="http://man.openbsd.org/?query=ftp-proxy&amp;sektion=8">ftp-proxy(8)</a> to proxy across rdomains.
+    <li>Added support for sending Wake on Lan packets using <a href="https://man.openbsd.org/?query=arp&amp;sektion=8">arp(8)</a>.
+    <li>Permit turning Wake on Lan support on/off using <a href="https://man.openbsd.org/?query=ifconfig&amp;sektion=8">ifconfig(8)</a>.
+    <li>Added Wake on Lan support to <a href="https://man.openbsd.org/?query=xl&amp;sektion=4">xl(4)</a>, <a href="https://man.openbsd.org/?query=re&amp;sektion=4">re(4)</a>, and <a href="https://man.openbsd.org/?query=vr&amp;sektion=4">vr(4)</a>.
+    <li>Allow <a href="https://man.openbsd.org/?query=ftp-proxy&amp;sektion=8">ftp-proxy(8)</a> to proxy across rdomains.
     <li>The IPv4 stack will no longer accept ICMP redirects when
       acting as a router.
     <li>By default the IPv6 stack will not process ICMP6 redirects.
-      <a href="http://man.openbsd.org/?query=rtsol&amp;sektion=8">rtsol(8)</a> will turn it back if -F is used.
-    <li>Reworked large parts of the <a href="http://man.openbsd.org/?query=dhclient&amp;sektion=8">dhclient(8)</a> options processing for better
+      <a href="https://man.openbsd.org/?query=rtsol&amp;sektion=8">rtsol(8)</a> will turn it back if -F is used.
+    <li>Reworked large parts of the <a href="https://man.openbsd.org/?query=dhclient&amp;sektion=8">dhclient(8)</a> options processing for better
       interoperability.
-    <li>Fixed <a href="http://man.openbsd.org/?query=carp&amp;sektion=4">carp(4)</a> to work in IPv6 only setups.
-    <li>Make it possible to <a href="http://man.openbsd.org/?query=bind&amp;sektion=2">bind(2)</a> to the local network broadcast address
+    <li>Fixed <a href="https://man.openbsd.org/?query=carp&amp;sektion=4">carp(4)</a> to work in IPv6 only setups.
+    <li>Make it possible to <a href="https://man.openbsd.org/?query=bind&amp;sektion=2">bind(2)</a> to the local network broadcast address
       on datagram and raw sockets.
     <li>The default multicast reject route is now ignored if the UDP socket
       uses the IP_MULTICAST_IF socket option.
-    <li>Make <a href="http://man.openbsd.org/?query=gre&amp;sektion=4">gre(4)</a> work between systems in the same LAN.
-    <li>Removed the link1 mode special addressing mode on <a href="http://man.openbsd.org/?query=lo&amp;sektion=4">lo(4)</a>.
+    <li>Make <a href="https://man.openbsd.org/?query=gre&amp;sektion=4">gre(4)</a> work between systems in the same LAN.
+    <li>Removed the link1 mode special addressing mode on <a href="https://man.openbsd.org/?query=lo&amp;sektion=4">lo(4)</a>.
     <li>Kernel randomization speed and quality improved substantially.
     </ul>
 <p>
 
 <li>Routing daemons and other userland network improvements:
     <ul>
-    <li><a href="http://man.openbsd.org/?query=bgpd&amp;sektion=8">bgpd(8)</a> no longer bumps the rlimits: the rc.d framework respects
+    <li><a href="https://man.openbsd.org/?query=bgpd&amp;sektion=8">bgpd(8)</a> no longer bumps the rlimits: the rc.d framework respects
       login classes which is a much better solution.
-    <li>Correctly set the network filtersets on reload in <a href="http://man.openbsd.org/?query=bgpd&amp;sektion=8">bgpd(8)</a>.
+    <li>Correctly set the network filtersets on reload in <a href="https://man.openbsd.org/?query=bgpd&amp;sektion=8">bgpd(8)</a>.
     <li>The routing socket is now sending RTM_DESYNC messages if the
        socketbuffer overflows.
-    <li>Allow <a href="http://man.openbsd.org/?query=ospfd&amp;sektion=8">ospfd(8)</a> to send out LS updates and other messages
+    <li>Allow <a href="https://man.openbsd.org/?query=ospfd&amp;sektion=8">ospfd(8)</a> to send out LS updates and other messages
       larger than the MTU.
-    <li>Fixed nexthop calculation in <a href="http://man.openbsd.org/?query=ospfd&amp;sektion=8">ospfd(8)</a> for directly connected P2P links.
-    <li>First bits to support opaque LSA in <a href="http://man.openbsd.org/?query=ospfd&amp;sektion=8">ospfd(8)</a>.  Only basic redistribute
+    <li>Fixed nexthop calculation in <a href="https://man.openbsd.org/?query=ospfd&amp;sektion=8">ospfd(8)</a> for directly connected P2P links.
+    <li>First bits to support opaque LSA in <a href="https://man.openbsd.org/?query=ospfd&amp;sektion=8">ospfd(8)</a>.  Only basic redistribute
       logic and LSDB handling for now.
-    <li>Creating new interfaces will no longer cause a fatal error in <a href="http://man.openbsd.org/?query=ospf6d&amp;sektion=8">ospf6d(8)</a>.
-    <li><a href="http://man.openbsd.org/?query=ospf6d&amp;sektion=8">ospf6d(8)</a> handles link-state changes better.
-    <li>Better loopback handling in <a href="http://man.openbsd.org/?query=ospf6d&amp;sektion=8">ospf6d(8)</a>.
-    <li>No longer install extra multicast routes in <a href="http://man.openbsd.org/?query=ripd&amp;sektion=8">ripd(8)</a> and <a href="http://man.openbsd.org/?query=ldpd&amp;sektion=8">ldpd(8)</a>.
-    <li>Make <a href="http://man.openbsd.org/?query=kqueue&amp;sektion=2">kqueue(2)</a> work with <a href="http://man.openbsd.org/?query=sosplice&amp;sektion=9">sosplice(9)</a>.
-    <li>Enabled <a href="http://man.openbsd.org/?query=sosplice&amp;sektion=9">sosplice(9)</a> in <a href="http://man.openbsd.org/?query=relayd&amp;sektion=8">relayd(8)</a> for TCP.
+    <li>Creating new interfaces will no longer cause a fatal error in <a href="https://man.openbsd.org/?query=ospf6d&amp;sektion=8">ospf6d(8)</a>.
+    <li><a href="https://man.openbsd.org/?query=ospf6d&amp;sektion=8">ospf6d(8)</a> handles link-state changes better.
+    <li>Better loopback handling in <a href="https://man.openbsd.org/?query=ospf6d&amp;sektion=8">ospf6d(8)</a>.
+    <li>No longer install extra multicast routes in <a href="https://man.openbsd.org/?query=ripd&amp;sektion=8">ripd(8)</a> and <a href="https://man.openbsd.org/?query=ldpd&amp;sektion=8">ldpd(8)</a>.
+    <li>Make <a href="https://man.openbsd.org/?query=kqueue&amp;sektion=2">kqueue(2)</a> work with <a href="https://man.openbsd.org/?query=sosplice&amp;sektion=9">sosplice(9)</a>.
+    <li>Enabled <a href="https://man.openbsd.org/?query=sosplice&amp;sektion=9">sosplice(9)</a> in <a href="https://man.openbsd.org/?query=relayd&amp;sektion=8">relayd(8)</a> for TCP.
     <li>Added support for divert-to which provides some benefits over
-      rdr-to in <a href="http://man.openbsd.org/?query=relayd&amp;sektion=8">relayd(8)</a>.
-    <li>Fixed trap sending in <a href="http://man.openbsd.org/?query=snmpd&amp;sektion=8">snmpd(8)</a>.
-    <li>Make <a href="http://man.openbsd.org/?query=ping6&amp;sektion=8">ping6(8)</a> compare minimum amount of bytes between what
+      rdr-to in <a href="https://man.openbsd.org/?query=relayd&amp;sektion=8">relayd(8)</a>.
+    <li>Fixed trap sending in <a href="https://man.openbsd.org/?query=snmpd&amp;sektion=8">snmpd(8)</a>.
+    <li>Make <a href="https://man.openbsd.org/?query=ping6&amp;sektion=8">ping6(8)</a> compare minimum amount of bytes between what
       was received and what was sent out.
-    <li>Make <a href="http://man.openbsd.org/?query=traceroute&amp;sektion=8">traceroute(8)</a> with type-of-service setted (-t) display
+    <li>Make <a href="https://man.openbsd.org/?query=traceroute&amp;sektion=8">traceroute(8)</a> with type-of-service setted (-t) display
       a message if the returned packet has a different tos type.
     <li>Added the socket splicing fields of struct socket to netstat -vP output.
     </ul>
 <p>
 
-<li><a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> improvements:
+<li><a href="https://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> improvements:
     <ul>
-    <li>Make <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> reassemble IPv6 fragments.  In the forward case, pf
+    <li>Make <a href="https://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> reassemble IPv6 fragments.  In the forward case, pf
       refragments the packets with the same maximum size.
-    <li>Allow <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> to filter on the rdomain a packet belongs to.
-    <li>Make <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> allow userland proxies to establish cross rdomain
+    <li>Allow <a href="https://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> to filter on the rdomain a packet belongs to.
+    <li>Make <a href="https://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> allow userland proxies to establish cross rdomain
       proxy sessions.
-    <li>Added IPv6 ACK prioritization in <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
+    <li>Added IPv6 ACK prioritization in <a href="https://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
     <li>Change 'set skip on &lt;...&gt;' to work with interface groups.
-    <li><a href="http://man.openbsd.org/?query=pfsync&amp;sektion=4">pfsync(4)</a> supports IPv6 as network protocol.
-    <li>Switched <a href="http://man.openbsd.org/?query=ftp-proxy&amp;sektion=8">ftp-proxy(8)</a> over to divert-to instead of rdr-to.
-    <li><a href="http://man.openbsd.org/?query=tftp-proxy&amp;sektion=8">tftp-proxy(8)</a> uses 'divert-to' as well.
+    <li><a href="https://man.openbsd.org/?query=pfsync&amp;sektion=4">pfsync(4)</a> supports IPv6 as network protocol.
+    <li>Switched <a href="https://man.openbsd.org/?query=ftp-proxy&amp;sektion=8">ftp-proxy(8)</a> over to divert-to instead of rdr-to.
+    <li><a href="https://man.openbsd.org/?query=tftp-proxy&amp;sektion=8">tftp-proxy(8)</a> uses 'divert-to' as well.
     </ul>
 <p>
 
 <li>SCSI improvements:
     <ul>
     <li>most SCSI hardware drivers now use the new iopools infrastructure.
-    <li><a href="http://man.openbsd.org/?query=sci&amp;sektion=4">scsi(4)</a> devices are now all provided with a unique devid, which
+    <li><a href="https://man.openbsd.org/?query=sci&amp;sektion=4">scsi(4)</a> devices are now all provided with a unique devid, which
       is displayed during the probe process.
     <li>ASC/ASCQ error codes and verbiage now in sync with
       http://www.t10.org/lists/asc-num.txt.
     <li>progress on iSCSI includes better login, better logout, preliminary
-      FSM support in <a href="http://man.openbsd.org/?query=iscsid&amp;sektion=8">iscsid(8)</a>, and improved logging and debug information.
-    <li><a href="http://man.openbsd.org/?query=uk&amp;sektion=4">uk(4)</a> can now safely and reliably detach an unknown SCSI device.
-    <li><a href="http://man.openbsd.org/?query=mpath&amp;sektion=4">mpath(4)</a> device and kernel support is improved.
-    <li><a href="http://man.openbsd.org/?query=vscsi&amp;sektion=4">vscsi(4)</a> now ensures output always goes to the correct connection.
-    <li><a href="http://man.openbsd.org/?query=vscsi&amp;sektion=4">vscsi(4)</a> connections can now be reset gracefully.
-    <li><a href="http://man.openbsd.org/?query=scsi&amp;sektion=4">scsi(4)</a> devices on fibre channel fabrics no longer inherit the adapter's
+      FSM support in <a href="https://man.openbsd.org/?query=iscsid&amp;sektion=8">iscsid(8)</a>, and improved logging and debug information.
+    <li><a href="https://man.openbsd.org/?query=uk&amp;sektion=4">uk(4)</a> can now safely and reliably detach an unknown SCSI device.
+    <li><a href="https://man.openbsd.org/?query=mpath&amp;sektion=4">mpath(4)</a> device and kernel support is improved.
+    <li><a href="https://man.openbsd.org/?query=vscsi&amp;sektion=4">vscsi(4)</a> now ensures output always goes to the correct connection.
+    <li><a href="https://man.openbsd.org/?query=vscsi&amp;sektion=4">vscsi(4)</a> connections can now be reset gracefully.
+    <li><a href="https://man.openbsd.org/?query=scsi&amp;sektion=4">scsi(4)</a> devices on fibre channel fabrics no longer inherit the adapter's
       address.
     </ul>
 <p>
 
 <li>Assorted improvements:
     <ul>
-    <li>For additional security, <a href="http://man.openbsd.org/?query=security&amp;sektion=8">security(8)</a> was rewritten in Perl.
-    <li>Mandoc 1.11.4: Now accepts <a href="http://man.openbsd.org/?query=eqn&amp;sektion=7">eqn(7)</a> input (no fancy formatting yet)
+    <li>For additional security, <a href="https://man.openbsd.org/?query=security&amp;sektion=8">security(8)</a> was rewritten in Perl.
+    <li>Mandoc 1.11.4: Now accepts <a href="https://man.openbsd.org/?query=eqn&amp;sektion=7">eqn(7)</a> input (no fancy formatting yet)
       and supports -Tutf8 output (but no utf8 input yet).
     <li>Removed a variety of OS-compat emulation code, leaving just the Linux
       support.
     <li>Small improvements to Linux compat (only available on i386).
-    <li>Improved our own <a href="http://man.openbsd.org/?query=pkg-config&amp;sektion=1">pkg-config(1)</a> implementation with extended comparison
+    <li>Improved our own <a href="https://man.openbsd.org/?query=pkg-config&amp;sektion=1">pkg-config(1)</a> implementation with extended comparison
       scheme and implementing various new options.
     <li>The math library, libm, was fully fleshed out to support all C99 required
       parts.  Many bugs for various architectures were fixed along the way.
-    <li><a href="http://man.openbsd.org/?query=malloc&amp;sektion=3">malloc(3)</a> is a lot faster and has a few further security features (more
+    <li><a href="https://man.openbsd.org/?query=malloc&amp;sektion=3">malloc(3)</a> is a lot faster and has a few further security features (more
       randomization, as well as the 'S' flag to enable all paranoia checks).
     <li>'make depend' is no longer neccessary in kernel compilation directories
       since the dependencies are calculated automatically.
     <li>Increased the default size of the buffer cache.
-    <li><a href="http://man.openbsd.org/?query=kqueue&amp;sektion=2">kqueue(2)</a> now works on /dev/random and spliced sockets
+    <li><a href="https://man.openbsd.org/?query=kqueue&amp;sektion=2">kqueue(2)</a> now works on /dev/random and spliced sockets
     <li>On MBR-based disks, scan through up to 256 extended partition tables
       when looking for an OpenBSD partition table.
-    <li>Added POSIX 2008 <a href="http://man.openbsd.org/?query=fdopendir&amp;sektion=3">fdopendir(3)</a> and <a href="http://man.openbsd.org/?query=opennat&amp;sektion=2">openat(2)</a> functions, as well as the
+    <li>Added POSIX 2008 <a href="https://man.openbsd.org/?query=fdopendir&amp;sektion=3">fdopendir(3)</a> and <a href="https://man.openbsd.org/?query=opennat&amp;sektion=2">openat(2)</a> functions, as well as the
       O_CLOEXEC, O_DIRECTORY, and F_DUPFD_CLOEXEC flags.
     <li>Improved lint format string checks and added a few other checks.
-    <li><a href="http://man.openbsd.org/?query=kdump&amp;sektion=1">kdump(1)</a> now dumps stat and sockaddr structures, sysctl mib
+    <li><a href="https://man.openbsd.org/?query=kdump&amp;sektion=1">kdump(1)</a> now dumps stat and sockaddr structures, sysctl mib
       strings, and decodes syscall flags and operation bits.
     <li>Improved kernel pool debug checking.
     <li>Improved correctness of signals and various syscalls when rthreads
       are in use.
-    <li>Kernel <a href="http://man.openbsd.org/?query=malloc&amp;sektion=9">malloc(9)</a> space and stacks moved to non-dma memory.
+    <li>Kernel <a href="https://man.openbsd.org/?query=malloc&amp;sektion=9">malloc(9)</a> space and stacks moved to non-dma memory.
     <li>Fixed some shutdown/reboot hangs on NFS clients.
     <li>UNIX-domain socket paths are now guaranteed to be NUL-terminated.
-    <li>Added support for <a href="http://man.openbsd.org/?query=wprintf&amp;sektion=3">*wprintf(3)</a>, <a href="http://man.openbsd.org/?query=wcscasecmp&amp;sektion=3">wcs{,n}casecmp(3)</a>, and <a href="http://man.openbsd.org/?query=wcsdup&amp;sektion=3">wcsdup(3)</a>.
+    <li>Added support for <a href="https://man.openbsd.org/?query=wprintf&amp;sektion=3">*wprintf(3)</a>, <a href="https://man.openbsd.org/?query=wcscasecmp&amp;sektion=3">wcs{,n}casecmp(3)</a>, and <a href="https://man.openbsd.org/?query=wcsdup&amp;sektion=3">wcsdup(3)</a>.
     <li>NULL is now a (void *).
     </ul>
 <p>
@@ -202,18 +202,18 @@
 <li>Install/Upgrade process changes:
     <ul>
     <li>Completed support for DUID disk installs, and enabled it fully.
-    <li>Tried to make <a href="http://man.openbsd.org/?query=sysmerge&amp;sektion=8">sysmerge(8)</a> work in the installer, but ran into small
+    <li>Tried to make <a href="https://man.openbsd.org/?query=sysmerge&amp;sektion=8">sysmerge(8)</a> work in the installer, but ran into small
       problems and decided to disable it.
     <li>Install non-free firmwares from the internet upon first boot, based on a
       question in the installer.
-    <li><a href="http://man.openbsd.org/?query=svnd&amp;sektion=4">svnd(4)</a>-like behaviour became the default for <a href="http://man.openbsd.org/?query=vnd&amp;sektion=4">vnd(4)</a> devices.  This is
+    <li><a href="https://man.openbsd.org/?query=svnd&amp;sektion=4">svnd(4)</a>-like behaviour became the default for <a href="https://man.openbsd.org/?query=vnd&amp;sektion=4">vnd(4)</a> devices.  This is
       what is used to build the media.
     </ul>
 <p>
 
-<li><a href="http://man.openbsd.org/?query=rc.d&amp;sektion=8">rc.d(8)</a> framework improvements:
+<li><a href="https://man.openbsd.org/?query=rc.d&amp;sektion=8">rc.d(8)</a> framework improvements:
     <ul>
-    <li><a href="http://man.openbsd.org/?query=rc.d&amp;sektion=8">rc.d(8)</a> is now also used for the base system daemons.
+    <li><a href="https://man.openbsd.org/?query=rc.d&amp;sektion=8">rc.d(8)</a> is now also used for the base system daemons.
     <li>Backward compatible with the historic way of starting daemons.
     <li>Notify the user by appending (ok) or (failed) in interactive mode.
     <li>Better diagnostics with the introduction of RC_DEBUG.
@@ -225,73 +225,73 @@
     <li>New features:
       <ul>
       <li>Introduce sandboxing of the pre-auth privsep child using an optional
-        <a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>
+        <a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>
         "UsePrivilegeSeparation=sandbox" mode that enables mandatory
         restrictions on the syscalls the privsep child can perform.
       <li>Add new SHA256-based HMAC transport integrity modes from
         http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt
         These modes are hmac-sha2-256, hmac-sha2-256-96, hmac-sha2-512,
         and hmac-sha2-512-96, and are available by default in
-        <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
+        <a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
         and
-        <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
+        <a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
       <li>The pre-authentication
-        <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>
+        <a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>
         privilege separation slave process now logs via a socket shared with
         the master process, avoiding the need to maintain /dev/log inside the
         chroot.
-      <li><a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
+      <li><a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
         now warns when a server refuses X11 forwarding.
-      <li><a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>'s
+      <li><a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>'s
         AuthorizedKeysFile now accepts multiple paths, separated by whitespace.
         The undocumented AuthorizedKeysFile2 option is deprecated (though the
         default for AuthorizedKeysFile includes .ssh/authorized_keys2).
-      <li><a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>:
+      <li><a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>:
         similarly deprecate UserKnownHostsFile2 and GlobalKnownHostsFile2 by
         making UserKnownHostsFile and GlobalKnownHostsFile accept multiple
         options and default to include known_hosts2.
-      <li><a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>'s
+      <li><a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>'s
         ControlPath option now expands %L to the host portion of the
         destination host name.
-      <li><a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>
+      <li><a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>
         "Host" options now support negated Host matching.
-      <li><a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>:
+      <li><a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>:
         a new RequestTTY option provides control over when a TTY is requested
         for a connection, similar to the existing -t/-tt/-T
-        <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
+        <a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
         commandline options.
-      <li><a href="http://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:
+      <li><a href="https://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:
         Add -A option. For each of the key types (rsa1, rsa, dsa and ecdsa) for
         which host keys do not exist, generate the host keys with the default
         key file path, an empty passphrase, default bits for the key type, and
         default comment. This is useful for system initialisation scripts.
-      <li><a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>:
+      <li><a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>:
         Allow graceful shutdown of multiplexing: request that a mux server
         removes its listener socket and refuse future multiplexing requests but
         don't kill existing connections. This may be requested using
         "ssh -O stop ...".
-      <li><a href="http://man.openbsd.org/?query=ssh-add&sektion=1">ssh-add(1)</a>:
+      <li><a href="https://man.openbsd.org/?query=ssh-add&sektion=1">ssh-add(1)</a>:
         now accepts keys piped from standard input.
       </ul>
     <li>The following significant bugs have been fixed in this release:
       <ul>
       <li>Retain key comments when loading v.2 keys. These will be visible in
         "ssh-add -l" and other places. (bz#439)
-      <li><a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
+      <li><a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
         and
-        <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:
+        <a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:
         set IPv6 traffic class from IPQoS (as well as IPv4 ToS/DSCP). (bz#1855)
-      <li><a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:
+      <li><a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:
         allow GSSAPI authentication to detect when a server-side failure causes
         authentication failure and don't count such failures against
         MaxAuthTries. (bz#1244)
-      <li><a href="http://man.openbsd.org/?query=ssh-keysign&sektion=8">ssh-keysign(8)</a>:
+      <li><a href="https://man.openbsd.org/?query=ssh-keysign&sektion=8">ssh-keysign(8)</a>:
         now signs hostbased authentication challenges correctly using ECDSA
         keys. (bz#1858)
-      <li><a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>:
+      <li><a href="https://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>:
         document that sftp accepts square brackets to delimit addresses
         (useful for IPv6). (bz#1847a)
-      <li><a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>:
+      <li><a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>:
         when using session multiplexing, the master process will change its
         process title to reflect the control path in use and when a
         ControlPersist-ed master is waiting to close. (bz#1883 and bz#1911)
@@ -343,9 +343,9 @@
 
 <li>As usual, steady improvements in manual pages and other documentation.
     <li>Base system and Xenocara manuals are now installed as source code,
-      making <a href="http://man.openbsd.org/?query=grep&amp;sektion=1">grep(1)</a> more useful in /usr/share/man/ and /usr/X11R6/man/.
+      making <a href="https://man.openbsd.org/?query=grep&amp;sektion=1">grep(1)</a> more useful in /usr/share/man/ and /usr/X11R6/man/.
     <li>If both formatted and source versions of manuals are installed,
-      <a href="http://man.openbsd.org/?query=man&amp;sektion=1">man(1)</a> automatically displays the newer version of each page.
+      <a href="https://man.openbsd.org/?query=man&amp;sektion=1">man(1)</a> automatically displays the newer version of each page.
 
  - The system includes the following major components from outside suppliers:
     <li>Xenocara (based on X.Org 7.6 with xserver 1.9 + patches,
@@ -440,9 +440,9 @@
 To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
 at <i>CD1:5.0/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
 use the
-<a href="http://man.openbsd.org/?query=dd&amp;sektion=1">dd(1)</a>
+<a href="https://man.openbsd.org/?query=dd&amp;sektion=1">dd(1)</a>
 utility. The following is an example usage of
-<a href="http://man.openbsd.org/?query=dd&amp;sektion=1">dd(1)</a>,
+<a href="https://man.openbsd.org/?query=dd&amp;sektion=1">dd(1)</a>,
 where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
 &quot;rfd0a&quot;.
 
@@ -725,7 +725,7 @@
 OpenBSD ports system.
 <p>
 The <i>ports/</i> directory represents a CVS (see the manpage for
-<a href="http://man.openbsd.org/?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386">
+<a href="https://man.openbsd.org/?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386">
 cvs(1)</a> if
 you aren't familiar with CVS) checkout of our ports.  As with our complete
 source tree, our ports tree is available via anoncvs.  So, in