Download NVIDIA drivers over https

[corecontingency]

See here:

# Source
if [ "$_driver_branch" = "vulkandev" ]; then
  if [[ $pkgver = 396* ]]; then
    _source_name="NVIDIA-Linux-x86_64-$pkgver.run::https://developer.nvidia.com/linux-${pkgver//.}"
  else
    _source_name="NVIDIA-Linux-x86_64-$pkgver.run::https://developer.nvidia.com/vulkan-beta-${pkgver//.}-linux"
  fi
else
    _source_name="http://us.download.nvidia.com/XFree86/Linux-x86_64/$pkgver/NVIDIA-Linux-x86_64-$pkgver.run"
fi

The drivers seem to only be downloaded over a TLS connection if using the Vulkan dev driver. I tested downloading the stable version 450.57 from:

http://us.download.nvidia.com/XFree86/Linux-x86_64/450.57/NVIDIA-Linux-x86_64-450.57.run

and it does not seem to upgrade the connection to https. Manually changing the URL from http to https worked though. The drivers only seem to be verified with md5sums, which are trivially broken and no longer secure for authentication.

Can you change the URL to https to prevent MITM attacks?

Thank you!