According lintian suggestion:
The Vcs-* field uses an unencrypted transport protocol for the
URI. It is recommended to use a secure transport such as HTTPS for
anonymous read-only access.
by reading them into cabal-debian, and serializing them again. This
_should_ only change whitespace, linebreaks and order of fields. At
least I hope so :-)