From: Bill K. <nb...@so...> - 2010-08-18 21:54:33
|
On Wed, Aug 18, 2010 at 04:52:05PM -0500, David Bruce wrote: > For things like online banking, a valid SSL cert is obviously > critical, but I've never quite understood why our package downloads > have to go through https:// rather than plain old http://. Well, that would be to prevent man-in-the-middle attacks where bad guys surrepticiously install keyloggers into the software being downloaded from the server, and thus own the end-users bank account password via that route. ;) -bill! |