Hector Martin

the sane proposal would be to default to https mirrors only by default, and allow people to choose less secure mirrors at their leisure. but https is a solved problem, and outside of apathy there's absolutely no reason to host an http-only content mirror in 2019

Why do you need to be NSA to capture the victim's traffic? And how capturing https differs from http in that regard?

A condescending note never helps, you know.

Some people don't learn until they get pwned (or get shown how people get pwned) - this is how @videolan closed the ticket with "no threat model, no proof". HTTPS is *still* a good idea even if you think your update signature model is bulletproof, for exactly this kind of reason.

Should Apple take note as well? iOS has been doing updates over HTTP for a loooooong time.

Well, I mean, Apple wrote their own HTTPS implementation anyway, and then 'goto fail' happened, so maybe Apple users are screwed either way ;-)