diff --git a/mobile/res/values/strings.xml b/mobile/res/values/strings.xml
index 0f84061c..bbbb5fb8 100644
--- a/mobile/res/values/strings.xml
+++ b/mobile/res/values/strings.xml
@@ -135,6 +135,8 @@
     <string name="pref_update_plugins_interval_sum">How often IITCm should search for new plugin versions</string>
     <string name="pref_force_plugin_update">Force plugin update</string>
     <string name="pref_force_plugin_update_sum">Update all enabled user plugins</string>
+    <string name="pref_secure_updates">Require secure updates</string>
+    <string name="pref_secure_updates_sum">If enabled, only https updates are handled</string>
 
     <string-array name="pref_hide_fullscreen">
         <item>System Bar</item>
diff --git a/mobile/res/xml/preferences.xml b/mobile/res/xml/preferences.xml
index 5978e5f1..c3d8e6ef 100644
--- a/mobile/res/xml/preferences.xml
+++ b/mobile/res/xml/preferences.xml
@@ -106,6 +106,11 @@
                     android:key="pref_force_plugin_update"
                     android:title="@string/pref_force_plugin_update"
                     android:summary="@string/pref_force_plugin_update_sum"/>
+                <CheckBoxPreference
+                    android:defaultValue="true"
+                    android:key="pref_secure_updates"
+                    android:summary="@string/pref_secure_updates_sum"
+                    android:title="@string/pref_secure_updates"/>
             </PreferenceCategory>
             <PreferenceCategory
                 android:key="pref_advanced_tweaks_cat"
diff --git a/mobile/src/com/cradle/iitc_mobile/IITC_Mobile.java b/mobile/src/com/cradle/iitc_mobile/IITC_Mobile.java
index 55ab13dc..ac563ea3 100644
--- a/mobile/src/com/cradle/iitc_mobile/IITC_Mobile.java
+++ b/mobile/src/com/cradle/iitc_mobile/IITC_Mobile.java
@@ -205,6 +205,7 @@ public class IITC_Mobile extends Activity
         } else if (key.equals("pref_press_twice_to_exit")
                 || key.equals("pref_share_selected_tab")
                 || key.equals("pref_messages")
+                || key.equals("pref_secure_updates")
                 || key.equals("pref_external_storage")) {
             // no reload needed
             return;
diff --git a/mobile/src/com/cradle/iitc_mobile/async/UpdateScript.java b/mobile/src/com/cradle/iitc_mobile/async/UpdateScript.java
index e8b48236..76bbb567 100644
--- a/mobile/src/com/cradle/iitc_mobile/async/UpdateScript.java
+++ b/mobile/src/com/cradle/iitc_mobile/async/UpdateScript.java
@@ -41,11 +41,17 @@ public class UpdateScript extends AsyncTask<String, Void, Boolean> {
             final String downloadURL = mScriptInfo.get("downloadURL");
             if (updateURL == null) updateURL = downloadURL;
 
+            // check for https protocol
+            final URL url = new URL(updateURL);
+            SharedPreferences prefs = PreferenceManager.getDefaultSharedPreferences(mActivity);
+            Boolean secureUpdates = prefs.getBoolean("pref_secure_updates", true);
+            if (!url.getProtocol().equals("https") && secureUpdates) return false;
+
             // get remote script meta information
-            final File local_file = new File(mFilePath);
-            final InputStream is = new URL(updateURL).openStream();
-            final String local_version = mScriptInfo.get("version");
+            final InputStream is = url.openStream();
             final String remote_version = IITC_FileManager.getScriptInfo(IITC_FileManager.readStream(is)).get("version");
+            final File local_file = new File(mFilePath);
+            final String local_version = mScriptInfo.get("version");
 
             // update script if neccessary
             if (local_version.compareTo(remote_version) < 0) {