On Thu, 10 May 2018 at 10:32 Jan Lahoda <[email protected]> wrote: > On Thu, May 10, 2018 at 10:10 AM, Neil C Smith <[email protected]> > wrote: > > Thanks! Just made a comment on the (already merged) PR, but that > redirect > > should be to https I believe? > > > > Eventually, probably yes. But http is better for now IMO: at least some of > the Apache mirrors use http, and we may need to redirect to them. So we > need to test if everything works correctly (quite possibly not) when going > from https to http. Unless we can convince Apache that all mirrors should > run on https, of course. >
Well, we probably should try! ;-) But OK fair enough, let's keep it as is for now. This came up a few times on the list IIRC around the nb-javac install, although that was also to do with the self-signed certificate I think? Alongside signing do we have support for checking checksums in the update process? This might also be useful in future if third-party modules need to be hosted elsewhere? I'll just put in a PR to change the link path for now then, and we can look at https later. Best wishes, Neil -- Neil C Smith Artist & Technologist www.neilcsmith.net Praxis LIVE - hybrid visual IDE for creative coding - www.praxislive.org
