Use of SSL for release downloads

1st Official Post

    I noticed that the downloads for LibreELEC use a non-https connection. Would it be possible to update the links to https? It appears https works, just the links don't use it.

    I noticed this came up once a couple of years ago (Security issue with download). That thread suggested that a server upgrade needed to happen first.

    Thanks!

    • Official Post

    the downloads are served via mirrors also over ftp - so you gain nothing with ssl there

    We serve hashsums via ssl that could be used to check for correct files (reminds me to add the links to the download, upps).

    Remember also Windows updates are server via http and it is not less secure due that!