[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2414: tell ActiveState to fix their download links for ActivePerl to be https

[Tahoe-LAFS]

#2414: tell ActiveState to fix their download links for ActivePerl to be https
------------------------------------------+--------------------------------
 Reporter:  daira                         |          Owner:
     Type:  task                          |         Status:  new
 Priority:  normal                        |      Milestone:  soon (release
Component:  packaging                     |  n/a)
 Keywords:  ActivePerl pyOpenSSL windows  |        Version:  n/a
                                          |  Launchpad Bug:
------------------------------------------+--------------------------------
 This affects building pyOpenSSL (see [source:docs/build/build-
 pyOpenSSL.rst]).

 I sent this message via https://www.activestate.com/company/contact-us :
 ----
 At https://www.activestate.com/activeperl/downloads there are two download
 links for !ActivePerl. They download from http URLs, even though the files
 are available over https. This is unnecessarily insecure (and affects the
 security of build processes for other software dependent on !ActivePerl).

 For example, the link to
 https://www.activestate.com/activeperl/downloads/thank-
 you?dl=http://downloads.activestate.com/ActivePerl/releases/5.20.2.2001/ActivePerl-5.20.2.2001-MSWin32-x86-64int-298913.msi
 should instead be
 https://www.activestate.com/activeperl/downloads/thank-
 you?dl=https://downloads.activestate.com/ActivePerl/releases/5.20.2.2001/ActivePerl-5.20.2.2001-MSWin32-x86-64int-298913.msi

 Please fix it, so that I don't have to tell people to manually change the
 link! Thanks.
 ----
 I'll leave this ticket open until they've responded.

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2414>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage