DMD downloads over HTTPS
WebFreak001
d.forum at webfreak.org
Thu Sep 26 20:06:20 UTC 2019
hi, at the setup-dlang repository (GitHub Action for installing D
in their CI environment) we are having a discussion about
downloading DMD over HTTP could lead to MITM attacks. However
downloads.dlang.org doesn't seem to have HTTPS available at all.
Is there some possibility to add HTTPS support to
downloads.dlang.org to make sure the downloads function properly?
GnuPG isn't listed on the installed binaries in a GitHub Actions
environment so it can't be called to check using the provided
keyring (which would need to be updated every once in a while too)
See the discussion at
https://github.com/mihails-strasuns/setup-dlang/issues/5
More information about the Digitalmars-d
mailing list