Realistically, for this use case, the risk is pretty minimal. You're fetching data files for a programs that contain no information that could be considered sensitive. In theory, it makes it easier for someone to spoof the source website, so someone potentially could cause your session to be redirected to a different website and you'd download a set of files that aren't official, but that's about it. Unless there's some specific flaw in the program that could somehow be leveraged to do something other than what it's supposed to do (highly unlikely), the really isn't a risk. (Bear in mind that if you want to be 100% secure, you need to disconnect your computer from the Internet, then from the power source, then throw it into one of those industrial shredders.)
A bigger risk would be if the main website didn't use HTTPS (it does). -----Original Message----- From: [email protected] <[email protected]> On Behalf Of John Shaw Sent: Sunday, April 01, 2018 8:29 PM To: [email protected] Subject: Re: [Dx4win] Check For Updates Won't Run So how does that affect security for all of this. Have we now all been put at more risk to satisfy those who want to run obsolete systems? -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Paul Van Der Eijk Sent: Monday, 2 April 2018 12:04 p.m. To: Jim Reisert AD1C <[email protected]> Cc: DX4WIN Reflector <[email protected]> Subject: Re: [Dx4win] Check For Updates Won't Run XP users should try the update again ; Scott, KA9FOX, changed the website such that the files directory no longer requires an https connection. —Paul, KK4HD Sent from my iPhone > On Mar 31, 2018, at 1:16 PM, Jim Reisert AD1C <[email protected]> > wrote: > >> On Sat, Mar 31, 2018 at 11:10 AM, David Kozinn K2DBK wrote: >> >> The only short-term workaround that I can think of would be to host >> the actual files on a different website without https and work up a >> manual process to download and install. (No Jim, I am not suggesting >> son-of-dxupdate-for-XP-only). > > Actually, the country files and award databases are uploaded to my > website. They would have to be installed manually. > > The latest country file is always here: > > http://www.country-files.com/dx4win/download9/dx4win9_cty.zip > > I have not done anything like this for the custom awards and I've > blocked the directory listing. > > If you use these files you are ON YOUR OWN. I do NOT want to support > this method of updating DX4WIN 9. I'd rather you upgrade your > operating system. Seriously. I'm not joking. > > -- > Jim Reisert AD1C, <[email protected]>, http://www.ad1c.us > ______________________________________________________________ > DX4WIN mailing list > Home: http://mailman.qth.net/mailman/listinfo/dx4win > Help: http://mailman.qth.net/mmfaq.htm > Post: mailto:[email protected] > Message delivered to [email protected] > > This list hosted by: http://www.qsl.net Please help support this email > list: http://www.qsl.net/donate.html ______________________________________________________________ DX4WIN mailing list Home: http://mailman.qth.net/mailman/listinfo/dx4win Help: http://mailman.qth.net/mmfaq.htm Post: mailto:[email protected] Message delivered to [email protected] This list hosted by: http://www.qsl.net Please help support this email list: http://www.qsl.net/donate.html ______________________________________________________________ DX4WIN mailing list Home: http://mailman.qth.net/mailman/listinfo/dx4win Help: http://mailman.qth.net/mmfaq.htm Post: mailto:[email protected] Message delivered to [email protected] This list hosted by: http://www.qsl.net Please help support this email list: http://www.qsl.net/donate.html ______________________________________________________________ DX4WIN mailing list Home: http://mailman.qth.net/mailman/listinfo/dx4win Help: http://mailman.qth.net/mmfaq.htm Post: mailto:[email protected] Message delivered to [email protected] This list hosted by: http://www.qsl.net Please help support this email list: http://www.qsl.net/donate.html
