Use of SSL for release downloads

  • I noticed that the downloads for LibreELEC use a non-https connection. Would it be possible to update the links to https? It appears https works, just the links don't use it.


    I noticed this came up once a couple of years ago (Security issue with download). That thread suggested that a server upgrade needed to happen first.


    Thanks!

  • the downloads are served via mirrors also over ftp - so you gain nothing with ssl there


    We serve hashsums via ssl that could be used to check for correct files (reminds me to add the links to the download, upps).

    Remember also Windows updates are server via http and it is not less secure due that!