https://www.gnu.org/software/binutils/ advises you to download binutils using |git clone git://sourceware.org/git/binutils-gdb.git| Could you change that to e.g. |git clone https://sourceware.org/git/binutils-gdb.git| for security reasons?