ubuntustudio-bugs team mailing list archive

Thread
Date

[Bug 1862428] Re: HTTPS required by Chrom/ium for future downloading

To: ubuntustudio-bugs@xxxxxxxxxxxxxxxxxxx
From: Erich Eickmeyer <1862428@xxxxxxxxxxxxxxxxxx>
Date: Sat, 15 Aug 2020 20:22:30 -0000
Reply-to: Bug 1862428 <1862428@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: ubuntustudio-website
     Assignee: (unassigned) => Erich Eickmeyer (eeickmeyer)

** Changed in: ubuntustudio-website
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Studio Bugs, which is subscribed to The Ubuntu Studio Project.
Matching subscriptions: UbuntuStudio Bugs
https://bugs.launchpad.net/bugs/1862428

Title:
  HTTPS required by Chrom/ium for future downloading

Status in Kubuntu Website:
  New
Status in Lubuntu Website:
  Fix Released
Status in Ubuntu CD Images:
  Fix Released
Status in Ubuntu MATE:
  New
Status in Ubuntu Studio Website:
  Fix Released
Status in Xubuntu Website:
  Fix Released

Bug description:
  Chromium has announced [1] that they will "ensure that secure (HTTPS)
  pages only download secure files. .. we’ll start blocking ... non-
  HTTPS downloads started on secure pages".  I also reached out and they
  confirmed our current download process will be impacted.

  The relevant timeline for ISOs are (changed due to covid):
  today - Chrome 81 (and derivatives) shows the console warnings
  user visible warning to be displayed for Chrome 84, which just landed in beta

  Impacted:
  This impacts the following secure websites that have downloads to cdimage that will break:
  ubuntu.com - Releases.ubuntu.com was upgraded to https and the main desktop link appears to use it, many other links use cdimage still though.
  ubuntubudgie.org
  ubuntu-mate.org
  kubuntu.org
  lubuntu.me
  ubuntukylin.com - upgraded to HTTPS (does mirror redirect, which choose an https mirror in my testing) - needs further testing.

  Not secure so not impacted today*: ubuntustudio.org,

  Good:
  xubuntu.org - Fixed, links to torrent site with HTTPS. Links to a folder on mirrors not directly to the ISO - which in my testing does not cause a warning.

  [1] https://blog.chromium.org/2020/02/protecting-users-from-insecure.html
  * But new warnings just loading an insecure site are coming

To manage notifications about this bug go to:
https://bugs.launchpad.net/kubuntu-website/+bug/1862428/+subscriptions