{"action":"opened","issue":{"url":"https://api.github.com/repos/cutechess/cutechess/issues/69","repository_url":"https://api.github.com/repos/cutechess/cutechess","labels_url":"https://api.github.com/repos/cutechess/cutechess/issues/69/labels{/name}","comments_url":"https://api.github.com/repos/cutechess/cutechess/issues/69/comments","events_url":"https://api.github.com/repos/cutechess/cutechess/issues/69/events","html_url":"https://github.com/cutechess/cutechess/issues/69","id":159765722,"number":69,"title":"Security of releases","user":{"login":"artoj","id":1174582,"avatar_url":"https://avatars.githubusercontent.com/u/1174582?v=3","gravatar_id":"","url":"https://api.github.com/users/artoj","html_url":"https://github.com/artoj","followers_url":"https://api.github.com/users/artoj/followers","following_url":"https://api.github.com/users/artoj/following{/other_user}","gists_url":"https://api.github.com/users/artoj/gists{/gist_id}","starred_url":"https://api.github.com/users/artoj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/artoj/subscriptions","organizations_url":"https://api.github.com/users/artoj/orgs","repos_url":"https://api.github.com/users/artoj/repos","events_url":"https://api.github.com/users/artoj/events{/privacy}","received_events_url":"https://api.github.com/users/artoj/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/cutechess/cutechess/milestones/1","html_url":"https://github.com/cutechess/cutechess/milestones/cutechess-gui%201.0","labels_url":"https://api.github.com/repos/cutechess/cutechess/milestones/1/labels","id":1766146,"number":1,"title":"cutechess-gui 1.0","description":"Issues that need to be done before cutechess-gui can be considered ready for the public","creator":{"login":"ilaripih","id":1620663,"avatar_url":"https://avatars.githubusercontent.com/u/1620663?v=3","gravatar_id":"","url":"https://api.github.com/users/ilaripih","html_url":"https://github.com/ilaripih","followers_url":"https://api.github.com/users/ilaripih/followers","following_url":"https://api.github.com/users/ilaripih/following{/other_user}","gists_url":"https://api.github.com/users/ilaripih/gists{/gist_id}","starred_url":"https://api.github.com/users/ilaripih/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ilaripih/subscriptions","organizations_url":"https://api.github.com/users/ilaripih/orgs","repos_url":"https://api.github.com/users/ilaripih/repos","events_url":"https://api.github.com/users/ilaripih/events{/privacy}","received_events_url":"https://api.github.com/users/ilaripih/received_events","type":"User","site_admin":false},"open_issues":6,"closed_issues":0,"state":"open","created_at":"2016-05-14T14:00:32Z","updated_at":"2016-06-11T09:46:42Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2016-06-11T09:46:42Z","updated_at":"2016-06-11T09:46:42Z","closed_at":null,"body":"Currently we don't sign our releases or provide the binaries over HTTPS. This is something that we want to address for 1.0. While Cute Chess probably isn't the  main target for tampering we want to be sure that what we release is what people get.\r\n\r\nAt minimum we should sign the release commits using the tools available in git and serve the binaries (with checksums) over HTTPS. This should be pretty straightforward with services such as Let's Encrypt."}}
{"actor":{"display_login":"artoj"}}