diff --git a/expat/lib/expat.h b/expat/lib/expat.h
index 1c83563c..3670ec7d 100644
--- a/expat/lib/expat.h
+++ b/expat/lib/expat.h
@@ -1051,7 +1051,7 @@ XML_SetBillionLaughsAttackProtectionActivationThreshold(
 #endif
 
 /* Expat follows the semantic versioning convention.
-   See http://semver.org.
+   See https://semver.org
 */
 #define XML_MAJOR_VERSION 2
 #define XML_MINOR_VERSION 5
diff --git a/expat/lib/xmltok.c b/expat/lib/xmltok.c
index 22821cb8..4aaf06bc 100644
--- a/expat/lib/xmltok.c
+++ b/expat/lib/xmltok.c
@@ -100,7 +100,7 @@
    & (1u << (((byte)[2]) & 0x1F)))
 
 /* Detection of invalid UTF-8 sequences is based on Table 3.1B
-   of Unicode 3.2: http://www.unicode.org/unicode/reports/tr28/
+   of Unicode 3.2: https://www.unicode.org/unicode/reports/tr28/
    with the additional restriction of not allowing the Unicode
    code points 0xFFFF and 0xFFFE (sequences EF,BF,BF and EF,BF,BE).
    Implementation details: