[Pidgin] #15277: Windows installer relies on HTTP rather than HTTPS

Pidgin trac at pidgin.im
Wed Aug 22 22:03:03 EDT 2012


#15277: Windows installer relies on HTTP rather than HTTPS
----------------------+-----------------------------------------------------
 Reporter:  ioerror   |        Owner:  datallah       
     Type:  defect    |       Status:  new            
Milestone:            |    Component:  winpidgin (gtk)
  Version:  2.10.6    |   Resolution:                 
 Keywords:  security  |  
----------------------+-----------------------------------------------------

Comment(by ioerror):

 Specifically, I see two urls being fetched insecurely.

 It fetches the gtk files over http from this url:
 http://pidgin.im/win32/download_redir.php?version=2.10.6&gtk_version=2.16.6.0&dl_pkg=gtk

 It also fetches debug symbols over http from this url:
 http://pidgin.im/win32/download_redir.php?version=2.10.6&dl_pkg=dbgsym

-- 
Ticket URL: <http://developer.pidgin.im/ticket/15277#comment:1>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list