helm icon indicating copy to clipboard operation
helm copied to clipboard

No https on tytel.org/helm downloads

Open georgeowell opened this issue 6 years ago • 2 comments

There is currently no HTTPS on the downloads section of @mtytel's website. People are basically downloading random unverified deb packages and installing them on their systems. This is a security and privacy issue especially with the internet in the state it is.

Considering helm is a little fiddly and intensive to install from source, I would guess 90% of users are using the deb files so I propose the following options:

  • Enable HTTPS on the site
  • Sign the deb packages using PGP
  • Distribute the packages using Github
  • Create a PPA for Ubuntu users
  • Create a snap package (cross distro)
  • Submit the package to the main distributions package repos

All the best! Love the synth :musical_keyboard: :notes: :headphones: :smile:

georgeowell avatar May 03 '18 00:05 georgeowell

This is a lot of stuff and I'm really slow at packaging, but I'll work on it. Thanks!

mtytel avatar May 11 '18 01:05 mtytel

Got HTTPS up! That's one down.

mtytel avatar Jul 07 '18 22:07 mtytel