DMD downloads over HTTPS

WebFreak001 d.forum at webfreak.org
Thu Sep 26 20:06:20 UTC 2019


hi, at the setup-dlang repository (GitHub Action for installing D 
in their CI environment) we are having a discussion about 
downloading DMD over HTTP could lead to MITM attacks. However 
downloads.dlang.org doesn't seem to have HTTPS available at all.

Is there some possibility to add HTTPS support to 
downloads.dlang.org to make sure the downloads function properly? 
GnuPG isn't listed on the installed binaries in a GitHub Actions 
environment so it can't be called to check using the provided 
keyring (which would need to be updated every once in a while too)

See the discussion at 
https://github.com/mihails-strasuns/setup-dlang/issues/5


More information about the Digitalmars-d mailing list