[Tux4kids-tuxtype-dev] Help [problem DL'ing tuxmath/tuxtype]

Bill Kendrick nbs at sonic.net
Wed Aug 18 21:54:14 UTC 2010


On Wed, Aug 18, 2010 at 04:52:05PM -0500, David Bruce wrote:
> For things like online banking, a valid SSL cert is obviously
> critical, but I've never quite understood why our package downloads
> have to go through https:// rather than plain old http://.

Well, that would be to prevent man-in-the-middle attacks where
bad guys surrepticiously install keyloggers into the software
being downloaded from the server, and thus own the end-users bank
account password via that route. ;)

-bill!



More information about the Tux4kids-tuxtype-dev mailing list