https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8104
René Schwarz <m...@rene-schwarz.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |m...@rene-schwarz.com --- Comment #3 from René Schwarz <m...@rene-schwarz.com> --- Dear Simon, thank you for reaching out to me. Yes, it would be fine from my point of view to switch to HTTPS for this mirror. The server is configured for providing the data via both HTTP and HTTPS. I think it's purely due to historic reasons that the mirror is still enlisted with HTTP: It was added almost 10 years ago and never changed since then. I don't want to judge whether this would actually be a sensible change in the context of the Spamassassin update mechanism. Having said this, @Kevin, please decide by yourself about it. I am equally fine with both options: Sticking to HTTP or changing it to HTTPS. -- You are receiving this mail because: You are the assignee for the bug.