[clamav-users] Why virus definition DB download url is not https?

Matus UHLAR - fantomas uhlar at fantomas.sk
Fri Dec 13 09:42:58 UTC 2019


On 12.12.19 22:15, Joel Esler (jesler) via clamav-users wrote:
>They are served over https.  But only 102.x supports https.  So as soon as
> everyone moves to https, I’ll gladly decommission http.

HTTP is easily cacheable, people may like that.

>> On Dec 12, 2019, at 15:01, Nick Howitt <nick at howitts.co.uk> wrote:
>>
>> But If you are behind another virus scanner, it can't so easily be intercepted and trip up the scanner.
>>
>>> On 12/12/2019 19:56, Al Varnell via clamav-users wrote:
>>> Each DB's integrity is protected by an embedded signature, so https adds little or nothing to security here.
>>>
>>> -Al-
>>>
>>>> On Dec 12, 2019, at 11:45, kaifeng zeng via clamav-users <clamav-users at lists.clamav.net <mailto:clamav-users at lists.clamav.net>> wrote:
>>>>
>>>> Hi,
>>>>
>>>> One of the recommended way to get the latest Virus definition DB is through the following link. Why they are not https? Thanks!
>>>>
>>>> http://database.clamav.net/main.cvd
>>>>
>>>> http://database.clamav.net/daily.cvd
>>>>
>>>> http://database.clamav.net/bytecode.cvd

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
There's a long-standing bug relating to the x86 architecture that
allows you to install Windows.   -- Matthew D. Fuller



More information about the clamav-users mailing list