id summary reporter owner description type status priority milestone component version resolution keywords cc launchpad_bug 2414 tell ActiveState to fix their download links for ActivePerl to be https daira daira "This affects building pyOpenSSL (see [source:docs/build/build-pyOpenSSL.rst]). I sent this message via https://www.activestate.com/company/contact-us : ---- At https://www.activestate.com/activeperl/downloads there are two download links for !ActivePerl. They download from http URLs, even though the files are available over https. This is unnecessarily insecure (and affects the security of build processes for other software dependent on !ActivePerl). For example, the link to https://www.activestate.com/activeperl/downloads/thank-you?dl=http://downloads.activestate.com/ActivePerl/releases/5.20.2.2001/ActivePerl-5.20.2.2001-MSWin32-x86-64int-298913.msi should instead be https://www.activestate.com/activeperl/downloads/thank-you?dl=https://downloads.activestate.com/ActivePerl/releases/5.20.2.2001/ActivePerl-5.20.2.2001-MSWin32-x86-64int-298913.msi Please fix it, so that I don't have to tell people to manually change the link! Thanks. ---- I'll leave this ticket open until they've responded." task closed normal soon (release n/a) packaging n/a was already fixed ActivePerl pyOpenSSL windows security