Use of SSL for release downloads

Steven Shockley · March 3, 2019 at 9:59 PM

I noticed that the downloads for LibreELEC use a non-https connection. Would it be possible to update the links to https? It appears https works, just the links don't use it.

I noticed this came up once a couple of years ago (Security issue with download). That thread suggested that a server upgrade needed to happen first.

Thanks!

**CvH** · March 4, 2019 at 6:55 PM Official Post

the downloads are served via mirrors also over ftp - so you gain nothing with ssl there

We serve hashsums via ssl that could be used to check for correct files (reminds me to add the links to the download, upps).

Remember also Windows updates are server via http and it is not less secure due that!