While testing NEXUS-8454, I noticed that the default nuget proxy remote storage URL was http://www.nuget.org/api/v2/. I was able to add the s (https://www.nuget.org/api/v2/) and test without issue.
Maven's (Central) defaults to secure. I asked Michael Prescott and he said it was worth filing to add here too.
Imagine this is a superquick change (probably could do it myself) however I wanted to triage in case anyone had any concerns.
So here's the ticket.
This is not a concern in NX2 and affects m4. I believe the default (CMA) repos were added in m4 but did not check older NX3 than m4 at this time.