{"action":"created","issue":{"url":"https://api.github.com/repos/arduino/Arduino/issues/5437","repository_url":"https://api.github.com/repos/arduino/Arduino","labels_url":"https://api.github.com/repos/arduino/Arduino/issues/5437/labels{/name}","comments_url":"https://api.github.com/repos/arduino/Arduino/issues/5437/comments","events_url":"https://api.github.com/repos/arduino/Arduino/issues/5437/events","html_url":"https://github.com/arduino/Arduino/issues/5437","id":180729894,"number":5437,"title":"https downloads","user":{"login":"NicoHood","id":6888294,"avatar_url":"https://avatars.githubusercontent.com/u/6888294?v=3","gravatar_id":"","url":"https://api.github.com/users/NicoHood","html_url":"https://github.com/NicoHood","followers_url":"https://api.github.com/users/NicoHood/followers","following_url":"https://api.github.com/users/NicoHood/following{/other_user}","gists_url":"https://api.github.com/users/NicoHood/gists{/gist_id}","starred_url":"https://api.github.com/users/NicoHood/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/NicoHood/subscriptions","organizations_url":"https://api.github.com/users/NicoHood/orgs","repos_url":"https://api.github.com/users/NicoHood/repos","events_url":"https://api.github.com/users/NicoHood/events{/privacy}","received_events_url":"https://api.github.com/users/NicoHood/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-10-03T19:50:18Z","updated_at":"2016-10-03T20:05:16Z","closed_at":null,"body":"A lot of link/downloads in the source do use http for download while a secure https is available instead.\r\nThose files can be found for example via github:\r\nhttps://github.com/arduino/Arduino/search?utf8=%E2%9C%93&q=http%3A%2F%2F\r\n\r\nMost important are the sources in build.xml:\r\nhttps://github.com/arduino/Arduino/blob/master/build/build.xml\r\n\r\nAnd also the avr cores:\r\nhttps://github.com/arduino/Arduino/blob/master/hardware/package_index_bundled.json\r\n\r\nSince arduino has https encryption you could possibly replace verything starting with `http://www.arduino.cc` with https. That would cover most links and would not break anything."},"comment":{"url":"https://api.github.com/repos/arduino/Arduino/issues/comments/251211228","html_url":"https://github.com/arduino/Arduino/issues/5437#issuecomment-251211228","issue_url":"https://api.github.com/repos/arduino/Arduino/issues/5437","id":251211228,"user":{"login":"cmaglie","id":423515,"avatar_url":"https://avatars.githubusercontent.com/u/423515?v=3","gravatar_id":"","url":"https://api.github.com/users/cmaglie","html_url":"https://github.com/cmaglie","followers_url":"https://api.github.com/users/cmaglie/followers","following_url":"https://api.github.com/users/cmaglie/following{/other_user}","gists_url":"https://api.github.com/users/cmaglie/gists{/gist_id}","starred_url":"https://api.github.com/users/cmaglie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cmaglie/subscriptions","organizations_url":"https://api.github.com/users/cmaglie/orgs","repos_url":"https://api.github.com/users/cmaglie/repos","events_url":"https://api.github.com/users/cmaglie/events{/privacy}","received_events_url":"https://api.github.com/users/cmaglie/received_events","type":"User","site_admin":false},"created_at":"2016-10-03T20:05:15Z","updated_at":"2016-10-03T20:05:15Z","body":"All files downloaded from build.xml or from json indexes are verified with checksums (sha/sha256).\r\nChanging everything to https will increase the servers load without any improvement in security.\r\n\r\nMaybe there are some places where using to https will improve security but this is not in build.xml or inside the indexes.\r\n"}}
{"actor":{"display_login":"cmaglie"}}