New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

HTTPS #6

Open

Luxitub opened this issue Sep 11, 2024 · 0 comments

Luxitub commented Sep 11, 2024

The website http://fluxbox.org/ itself does not provided HTTPS, which can be seen as a security issue due to the website providing hyperlinks to tarballs (hyperlinks which can be altered by a man-in-the-middle attack).

On the same topic, several pages provides links without "https" when the secure mode is available:

http://fluxbox.org/download/
- Links to tarballs
http://fluxbox.org/help/
- freenode.org
- sourceforge.net, which is now written SourceForge by the way
...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment