diff --git a/net/dns/direct_test.go b/net/dns/direct_test.go
index 2c89debe5..399eac2eb 100644
--- a/net/dns/direct_test.go
+++ b/net/dns/direct_test.go
@@ -88,7 +88,7 @@ func testDirect(t *testing.T, fs wholeFileFS) {
 		t.Fatal(err)
 	}
 	want := `# resolv.conf(5) file generated by tailscale
-# For more info, see http://tailscale.com/s/resolvconf-overwrite
+# For more info, see https://tailscale.com/s/resolvconf-overwrite
 # DO NOT EDIT THIS FILE BY HAND -- CHANGES WILL BE OVERWRITTEN
 
 nameserver 8.8.8.8
diff --git a/net/dns/resolvconffile/resolvconffile.go b/net/dns/resolvconffile/resolvconffile.go
index f47056da4..769ea1b42 100644
--- a/net/dns/resolvconffile/resolvconffile.go
+++ b/net/dns/resolvconffile/resolvconffile.go
@@ -42,7 +42,7 @@ type Config struct {
 func (c *Config) Write(w io.Writer) error {
 	buf := new(bytes.Buffer)
 	io.WriteString(buf, "# resolv.conf(5) file generated by tailscale\n")
-	io.WriteString(buf, "# For more info, see http://tailscale.com/s/resolvconf-overwrite\n")
+	io.WriteString(buf, "# For more info, see https://tailscale.com/s/resolvconf-overwrite\n")
 	io.WriteString(buf, "# DO NOT EDIT THIS FILE BY HAND -- CHANGES WILL BE OVERWRITTEN\n\n")
 	for _, ns := range c.Nameservers {
 		io.WriteString(buf, "nameserver ")