3 ms·
Care to elaborate? http://ring.cx http://ring.cx has a 301 forward to https://ring.cx https://ring.cx, and all the downloads seem to use https as well. Where is
by brute 10y ago
Care to elaborate? http://ring.cx http://ring.cx has a 301 forward to https://ring.cx https://ring.cx, and all the downloads seem to use https as well. Where is it using plain http? Or was the forward added in the last hour?
- teraflop 10y agoThe links on the "Downloads" page are HTTPS, but the download button on the home page points to http://gpl.savoirfairelinux.net/ring-download/windows/ring-windows-nightly-x64.exe http://gpl.savoirfairelinux.net/ring-download/windows/ring-w... with no security.
- brute 10y agoThank you, that explains it. For me, the same button links to https://ring.cx/en/download/gnu-linux https://ring.cx/en/download/gnu-linux but under windows you are right.
- alphapapa 10y agoCouldn't a MitM attack skip the redirect?
- strcat 10y agoSure, although not in mainstream browsers if there's HSTS + HSTS preloading, which can be easily adopted by any site. Outside browsers, HSTS is usually not supported. It was actually implemented by wget, but without preloading, so it only works after first use which is much less useful.