Wait - a critical security update distributed via plain HTTP instead of HTTPS...... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

aruggirello on May 13, 2017 | parent | context | favorite | on: Microsoft Issues WanaCrypt Patch for Windows 8, XP

Wait - a critical security update distributed via plain HTTP instead of HTTPS...? I checked all the links provided for my computers, too - they're all http://

sschueller on May 13, 2017 | [–]

Probably because some windows xp boxes can't connect to https servers running TLS 1.2 so the patches are available under http as well.

aw3c2 on May 13, 2017 | [–]

No issue as long as the updates are properly signed. Distributing updates via HTTP/FTP is normal in Linux land.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact