Does my site need HTTPS?

Find out if your site needs HTTPS.

(Hint: it does)


One genuine question, is there a point in doing that if the downloaded file will be immediately verified (with e.g. GPG or signify-openbsd)? It seems redundant to verify the connection when the result will be checked anyway (so it already can't be tampered with).

The public keys would obviously be shared over HTTPS.

Sign in to participate in the conversation is a community for anyone living in the European Union. This server is operated by Albin Social.