[clamav-users] Why virus definition DB download url is not https?

Joel Esler (jesler) jesler at cisco.com
Thu Dec 12 22:15:01 UTC 2019


They are served over https. But only 102.x supports https.  So as soon as everyone moves to https, I’ll gladly decommission http.  

Sent from my  iPhone

> On Dec 12, 2019, at 15:01, Nick Howitt <nick at howitts.co.uk> wrote:
> 
> But If you are behind another virus scanner, it can't so easily be intercepted and trip up the scanner.
> 
>> On 12/12/2019 19:56, Al Varnell via clamav-users wrote:
>> Each DB's integrity is protected by an embedded signature, so https adds little or nothing to security here.
>> 
>> -Al-
>> 
>>> On Dec 12, 2019, at 11:45, kaifeng zeng via clamav-users <clamav-users at lists.clamav.net <mailto:clamav-users at lists.clamav.net>> wrote:
>>> 
>>> Hi,
>>> 
>>> One of the recommended way to get the latest Virus definition DB is through the following link. Why they are not https? Thanks!
>>> 
>>> http://database.clamav.net/main.cvd
>>> 
>>> http://database.clamav.net/daily.cvd
>>> 
>>> http://database.clamav.net/bytecode.cvd
>>> 
>>> Kaifeng
>> 
>> _______________________________________________
>> 
>> clamav-users mailing list
>> clamav-users at lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>> 
>> 
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> 
> 
> 
> _______________________________________________
> 
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml


More information about the clamav-users mailing list