An issue exists in Cobbler up to and including 3.3.1. Routines in several files use the HTTP protocol instead of the more secure HTTPS.
cobbler project cobbler