Page 1 of 1
Updater downloads through http instead of https
Posted: 09 Jul 2018 13:51
by ygoe
Seen in v3.0.2 on Windows 10 x64. I'm now downloading the update through the website with https.
Re: Updater downloads through http instead of https
Posted: 10 Jul 2018 09:51
by garf
Hello,
as long as the new version is correctly signed (by VideoLAN), there is no security issue.
Re: Updater downloads through http instead of https
Posted: 10 Jul 2018 10:46
by ale5000
But still is a privacy issue especially if you download it from a public Wi-Fi.
Re: Updater downloads through http instead of https
Posted: 11 Jul 2018 10:33
by Jean-Baptiste Kempf
But still is a privacy issue especially if you download it from a public Wi-Fi.
The fact that you download VLC???
Re: Updater downloads through http instead of https
Posted: 11 Jul 2018 10:58
by ale5000
Yes, well it is just a trivial privacy problem but switching absolutely everything to HTTPS is certainly better (hopefully now with HTTP/2, TLS 1.3 draft 28 and DNS over TLS).