I'm a bit paranoid and often want to download from https. Here's via http  I could not find it via https. Actually I just need sha256sums via https, download itself don't care. My question is different to another question as I'm interested about ISO sha256sums and ISO itself.  I also found that
15860
Are repository updates secure?  As a bear of little brain from the developer side, I cannot understand why the repository list is http://security.ubuntu.com and the other http(unsecured) sites listed in /etc/apt/sources.list.  Without a certificate chain match this appears as "ask any responder for a list of packages to update" instead of "ask the ubuntu.com site..."  Can any network choose to spoof the update sites, and is this a common practice to provide a locally cached and vetted copy?
9493
Stack Overflow has HTTPS in some places! However, this breaks most existing image links. Could those be made protocol-relative, or react to the requesting protocol, or just always use HTTPS?  The same applies to .sponsor-tag-img.
77936
It seems like the engine completely breaks all links that use a URI with a scheme other than 'http' or 'https'. Web != Internet, guys! ;)  For example, the market scheme links to the Android market: market://details?id=com.google.zxing.client.android (&lt;-- if it worked, you'd see a link here)  I can also think of a number of relevant schemes for the Gaming SE, e.g. the steam scheme:     steam://store/400/ (&lt;-- if it worked, you'd see a link here) And various smaller ones which are specific to certain games to install mods, add-ons, etc.  And here's a real life example:  If this link wasn't broken, I could just click it and my phone would start installing the app or show the search results.
75965
When comparing an HTTP GET to an HTTP POST, what are the differences from a security perspective? Is one of the choices inherently more secure than the other? If so, why?  I realize that POST doesn't expose information on the URL, but is there any real value in that or is it just security through obscurity? Is there ever a reason that I should prefer POST when security is a concern?  Edit: Over HTTPS, POST data is encoded, but could URLs be sniffed by a 3rd party? Additionally, I am dealing with JSP; when using JSP or a similar framework, would it be fair to say the best practice is to avoid placing sensitive data in the POST or GET altogether and using server side code to handle sensitive information instead?
33107
I'm writing a program that reads content from a user provided URL. My problem is in the code that goes something like this: Uri uri = new Uri(url); WebRequest webRequest = WebRequest.Create(uri); WebResponse webResponse = webRequest.GetResponse(); ReadFrom(webResponse.GetResponseStream());  And this is breaking if the provided url is an https:// URL. Can anyone help me with changing this code so that it will work with SSL encrypted content. Thanks.
16115
So, I was having this weird thought. If the checksums(MD5 or SHA...) are unique to any file and are modified if any part of the file is edited, why cant the checksums be decoded back to get the original file? That is if I want to send a large(say 700MB) video, instead I could send just the hash and the file be decoded locally in my friend's computer. I know the thought is stupid, but is it possible by any chance? Or am I missing some thing here? And forgive me if I'm wrong, I ain't a professional.
97044
Stack Overflow  to work through , but the custom avatars (uploaded files, not those from gravatar) are even then fetched from  using standard   (which generates warning in browsers and is not a very good practice). As those images are also available   it could be just a service misconfiguration.  Is there a technical (or any other) reason why they couldn't be fetched using HTTPS?
62172
I tried downloading the zip file but I couldn't find any binary or install file.  Is it available via apt or can we access the latest .deb file somehow?  edit  uname -a      Linux XXXX 2.6.38-11-generic #50-Ubuntu SMP Mon Sep 12 21:17:25 UTC   2011 x86_64 x86_64 x86_64 GNU/Linux
50838
My memory isn't great but I think five or six years ago, when I downloaded some package, there was never a checksum line under the download icon on the webpage. And no instructions to "check the checksum" to make sure your download is correct. Now these things are everywhere. I have two questions about them (whether MD5 or whatever).   When did they start becomeing so popular and why are they used? I mean, if I'm downloading a package from server X, then it is up to the server to make sure it is giving me the correct package (I think, anyway). How do you check the checksum? Usually I download the package and install it immediately. Maybe this is stupid.
109722
I would like to have  on my system but I would like to install it via apt-get. Is there a special package to install this?  Download link would be:
3600
I’d like to know the transmission of SE  Android app is encrypted or not with https. Please make me confirm.
4190
I am looking to use Java to get the MD5 checksum of a file.  I was really surprised but I haven't been able to find anything that shows how to get the MD5 checksum of a file.  How is it done?
99116
Chrome's default search engine is .  How we can force chrome to use  without https?  I need a solution that allows proxies to rewrite my URLs, but https currently makes this impossible...
104519
Not sure if this belongs here or at serverfault...  I've seen websites where, to login to the website, requires a digital certificate to be installed for the user logging in. As far as I can tell, this certificate is in addition to the website using an SSL certificate (https)  I'm just looking to be pointed in the right direction on how to code for this (apache / php hopefully), who issues these certificates (must it be a trusted var or can I ?) or even what to search for via google.  -Mario
18172
I'm writing a program that needs to download GPG keys for various distributions to do unattended net installs. To do this securely and in an automated way, I need to download the key via HTTPS, which means "gpg --recv-keys" isn't an option. Other distributions (e.g., Fedora) make their keys available on their websites via HTTPS (e.g., ), but I can't find the Ubuntu key file anywhere on ubuntu.com. Does anyone know where I can get it via HTTPS?
18677
What measures can/should I take to make sure that security around my SSH server is absolutely impermeable?  This will be community wiki from the start, so lets see what people do to secure their servers.
2259
I would like to set up a new business site. I plan to direct www.example.com to example.com and only use that domain. My plan is also to only use HTTPS and not HTTP.   Does this affect the SEO for the site? E.g. do Google put lower or higher rank for sites that is only available via HTTPS?