[tor-bugs] #12897 [Website]: RPM/APT repos are available via HTTPS - tell people to use HTTPS - not HTTP

[Tor Bug Tracker & Wiki]

#12897: RPM/APT repos are available via HTTPS - tell people to use HTTPS - not HTTP
-------------------------+---------------------
 Reporter:  cypherpunks  |          Owner:
     Type:  defect       |         Status:  new
 Priority:  normal       |      Milestone:
Component:  Website      |        Version:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
-------------------------+---------------------
 You are instructing users to configure their systems to fetch updates via
 http [1][2] - not https. This is no big deal for debian/ubuntu since repo
 metadata is signed via GPG, but you don't sign your RPM repo metadata
 #12871. So HTTPS is an actual security improvement over HTTP in that case.

 So it would be best to update the pages to point towards https instead of
 http.


 [1] https://www.torproject.org/docs/rpms.html.en
 [2] https://www.torproject.org/docs/debian.html.en

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12897>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online