[Bug 96827] New: website www.spice-space.org: downloads are not secured at all

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Tue Jul 5 22:04:38 UTC 2016


https://bugs.freedesktop.org/show_bug.cgi?id=96827

            Bug ID: 96827
           Summary: website www.spice-space.org: downloads are not secured
                    at all
           Product: Spice
           Version: unspecified
          Hardware: Other
                OS: All
            Status: NEW
          Severity: critical
          Priority: medium
         Component: RFE (general)
          Assignee: spice-bugs at lists.freedesktop.org
          Reporter: frdsktp at genodeftest.de

Currently, the website http://www.spice-space.org/ is not encrypted nor does it
provide any signatures for downloads. This is an easy target for
man-in-the-middle-attacks.

Please
1. make this site available through HTTPS (and only HTTPS)
2. provide gpg signatures for downloads

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/spice-bugs/attachments/20160705/9ecbce89/attachment.html>


More information about the spice-bugs mailing list