yeaaaaaaaah·7 tahun yang lalu·discussExcept the signing key was also downloaded over plain HTTP so all bets are off.