[Pidgin] #15277: Windows installer relies on HTTP rather than HTTPS

Pidgin trac at pidgin.im
Thu Sep 20 23:25:39 EDT 2012


#15277: Windows installer relies on HTTP rather than HTTPS
-------------------------+------------------------------
 Reporter:  ioerror      |       Owner:  datallah
     Type:  enhancement  |      Status:  new
Milestone:               |   Component:  winpidgin (gtk)
  Version:  2.10.6       |  Resolution:
 Keywords:  security     |
-------------------------+------------------------------

Comment (by datallah):

 Replying to [comment:9 ioerror]:
 > I wonder - would it be possible to make a very small stub installer that
 embeds all of the sha1sum hashes into it and fetches everything as
 expected? If so, putting that up on a secure download page seems like an
 absolute win for everyone.


 That's an interesting thought.  It would take some work, but it'd be
 possible to do.

 My priority (and all I have time for right now) is to address the
 outstanding issues; this may be something to think about later.

-- 
Ticket URL: <https://developer.pidgin.im/ticket/15277#comment:10>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list