https://bugs.documentfoundation.org/show_bug.cgi?id=146147
Bug ID: 146147
Summary: Download in South Africa is insecure, causing
authentication problems
Product: LibreOffice
Version: 7.1.8.1 release
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: Installation
Assignee: [email protected]
Reporter: [email protected]
Description:
When downloading LibreOffice from the website [1] in UK, the download is fine.
But when downloading in South Africa, the download link is insecure, which
causes problems:
• Chrome refuses to download
• Edge permits the download after a warning
• It's necessary to check the SHA256 in case the download is compromised
This has been the case for a while, not just recently.
[1] https://www.libreoffice.org/download/download/
Steps to Reproduce:
1. Go to libreoffice.org > Download in South Africa
2. Download LibreOffice (I used Windows 64-bit, stable version)
Actual Results:
The displayed link when hovering over the Download button is secure [2]
screenshot 1), but the resolved link to download is insecure [3] (screenshot
2).
[2]
https://www.libreoffice.org/donate/dl/win-x86_64/7.1.8/en-GB/LibreOffice_7.1.8_Win_x64.msi
[3]
http://tdf.saix.net/libreoffice/stable/7.1.8/win/x86_64/LibreOffice_7.1.8_Win_x64.msi
Expected Results:
The resolved link should be secure via https.
Reproducible: Always
User Profile Reset: No
Additional Info:
Screenshot 1 shows the initial Download link.
Screenshot 2 shows the resolved link as actually downloaded from Edge.
--
You are receiving this mail because:
You are the assignee for the bug.
