[llvm-bugs] [Bug 34995] New: Download page does not use HTTPS, makes provided signatures useless.

[via llvm-bugs]

https://bugs.llvm.org/show_bug.cgi?id=34995

            Bug ID: 34995
           Summary: Download page does not use HTTPS, makes provided
                    signatures useless.
           Product: Website
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: release blocker
          Priority: P
         Component: General Website
          Assignee: unassignedbugs at nondot.org
          Reporter: hakon.amu at gmail.com
                CC: llvm-bugs at lists.llvm.org

The LLVM download page (http://releases.llvm.org/download.html) does not use
HTTPS. This makes the signatures provided useless, and makes it impossible to
trust anything downloaded from the site.

To fix: Ensure that download site is HTTPS and signed with a verified
certificate. 


Related to https://bugs.llvm.org/show_bug.cgi?id=31474

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-bugs/attachments/20171018/c27fc3fa/attachment.html>