helm
helm copied to clipboard
No https on tytel.org/helm downloads
There is currently no HTTPS on the downloads section of @mtytel's website. People are basically downloading random unverified deb packages and installing them on their systems. This is a security and privacy issue especially with the internet in the state it is.
Considering helm is a little fiddly and intensive to install from source, I would guess 90% of users are using the deb files so I propose the following options:
- Enable HTTPS on the site
- Sign the deb packages using PGP
- Distribute the packages using Github
- Create a PPA for Ubuntu users
- Create a snap package (cross distro)
- Submit the package to the main distributions package repos
All the best! Love the synth :musical_keyboard: :notes: :headphones: :smile:
This is a lot of stuff and I'm really slow at packaging, but I'll work on it. Thanks!
Got HTTPS up! That's one down.