Each DB's integrity is protected by an embedded signature, so https adds little or nothing to security here.

-Al-

On Dec 12, 2019, at 11:45, kaifeng zeng via clamav-users <clamav-users@lists.clamav.net> wrote:

Hi,

One of the recommended way to get the latest Virus definition DB is through the following link. Why they are not https? Thanks!

http://database.clamav.net/main.cvd

http://database.clamav.net/daily.cvd

http://database.clamav.net/bytecode.cvd

Kaifeng