[clamav-users] Why virus definition DB download url is not https?

[Joel Esler (jesler)]

The definitions are cached by our CDN now.  

Https just makes the transport layer encrypted.  The definitions are already signed, as you all know.  

Sent from my  iPhone

> On Dec 13, 2019, at 04:43, Matus UHLAR - fantomas <uhlar at fantomas.sk> wrote:
> 
> On 12.12.19 22:15, Joel Esler (jesler) via clamav-users wrote:
>> They are served over https.  But only 102.x supports https.  So as soon as
>> everyone moves to https, I’ll gladly decommission http.
> 
> HTTP is easily cacheable, people may like that.
> 
>>>> On Dec 12, 2019, at 15:01, Nick Howitt <nick at howitts.co.uk> wrote:
>>> 
>>> But If you are behind another virus scanner, it can't so easily be intercepted and trip up the scanner.
>>> 
>>>> On 12/12/2019 19:56, Al Varnell via clamav-users wrote:
>>>> Each DB's integrity is protected by an embedded signature, so https adds little or nothing to security here.
>>>> 
>>>> -Al-
>>>> 
>>>>> On Dec 12, 2019, at 11:45, kaifeng zeng via clamav-users <clamav-users at lists.clamav.net <mailto:clamav-users at lists.clamav.net>> wrote:
>>>>> 
>>>>> Hi,
>>>>> 
>>>>> One of the recommended way to get the latest Virus definition DB is through the following link. Why they are not https? Thanks!
>>>>> 
>>>>> http://database.clamav.net/main.cvd
>>>>> 
>>>>> http://database.clamav.net/daily.cvd
>>>>> 
>>>>> http://database.clamav.net/bytecode.cvd
> 
> -- 
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> There's a long-standing bug relating to the x86 architecture that
> allows you to install Windows.   -- Matthew D. Fuller
> 
> _______________________________________________
> 
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml