Again. This shows us why we need to operate HTTPS everywhere. Many software download sites delivers its software over http, and don't provide a checksum or pro

Again. This shows us why we need to operate HTTPS everywhere. Many software download sites delivers its software over http, and don't provide a checksum or provide one over http only. This is really unacceptable yet it is common practice. (Example: Skype, ZeptoJS) Please. If you're a dev at a company that doesn't offer HTTPS download, make it happen! If your software got patched with malware, your users will blame you.