← Back to index | Original Bugzilla link

Bug 23197 – release archive page is not http secure

Status: RESOLVED
Resolution: WORKSFORME
Severity: normal
Priority: P3
Component: dlang.org
Product: D
Version: D2
Platform: All
OS: All
Creation time: 2022-06-20T12:05:37Z
Last change time: 2022-12-20T22:38:59Z
Assigned to: No Owner
Creator: Basile-z

Comments

Comment #0 by b2.temp — 2022-06-20T12:05:37Z

the page https://dlang.org/download.html contains the archive link http://downloads.dlang.org/ which is not secure. All links in there, secpecially http://downloads.dlang.org/releases/2.x/, are not secure either, including signatures.

Comment #1 by dfj1esp02 — 2022-06-20T13:19:00Z

By secure you mean confidential? Authenticity of asymmetric signatures relies on secrecy of signer's private key, not on confidentiality of signature itself.

Comment #2 by b2.temp — 2022-06-20T13:20:34Z

cmon ;) you know what I mean. https.