diff --git a/ChangeLog.md b/ChangeLog.md
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,3 +1,7 @@
+## 0.2.5.1
+
+* hackage-docs uses HTTPS for uploads
+
 ## 0.2.5
 
 hackage-docs now also handles uploads from tarballs dir
diff --git a/cabal-src.cabal b/cabal-src.cabal
--- a/cabal-src.cabal
+++ b/cabal-src.cabal
@@ -1,5 +1,5 @@
 Name:                cabal-src
-Version:             0.2.5
+Version:             0.2.5.1
 Synopsis:            Alternative install procedure to avoid the diamond dependency issue.
 Description:         Please see the README.md file on Github for more information: <https://github.com/yesodweb/cabal-src/blob/master/README.md>.
 License:             BSD3
@@ -48,6 +48,7 @@
                      , temporary
                      , classy-prelude-conduit
                      , Cabal
+                     , streaming-commons >= 0.1.7
 
 source-repository head
   type:     git
diff --git a/hackage-docs.hs b/hackage-docs.hs
--- a/hackage-docs.hs
+++ b/hackage-docs.hs
@@ -33,7 +33,7 @@
     let formData =
             [ partFile "package" $ fpToString fp
             ]
-    req1 <- formDataBody formData "http://hackage.haskell.org/packages/"
+    req1 <- formDataBody formData "https://hackage.haskell.org/packages/"
     let req2 = applyBasicAuth username password req1
     tryAny (httpLbs req2 man) >>= print