https://bugs.documentfoundation.org/show_bug.cgi?id=100824
--- Comment #4 from [email protected] ---
(In reply to MM from comment #3)
>
> I see. But it's not a bug, as the link is working normally. You might wanna
> set it as enhancement.
>
You can call that an enhancement. I call the current situation a security hole.
A MitM can use that to install malware. Some rogue tor node did it, it's not
science fiction.
Using only https mirrors is one solution. Another one could be a small
downloader, downloaded from the https official website, that download from
mirrors/torrent and check the checksum before install.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
