Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

-U doesn't use encrypted connection #5909

Closed
mrphs opened this issue Jun 6, 2015 · 1 comment
Closed

-U doesn't use encrypted connection #5909

mrphs opened this issue Jun 6, 2015 · 1 comment

Comments

@mrphs
Copy link

@mrphs mrphs commented Jun 6, 2015

When I try to update youtube-dl using -U option on OSX, it tries to connect to rg3.github.io over port 80. And then it tries to update the software over an unencrypted and unauthenticated channel.

This is bad, because unencrypted and unauthenticated traffic is bad, and because anyone on the network could easily tamper the traffic.

Please use TLS?

@jaimeMF jaimeMF closed this in de390ea Jun 6, 2015
@jaimeMF
Copy link
Collaborator

@jaimeMF jaimeMF commented Jun 6, 2015

Fixed, thanks for the report!

Note that the files are verified with RSA, so it shouldn't be as easy as replacing the content (but my knowledges are quite limited in that field).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
2 participants
You can’t perform that action at this time.