search

HomeSeer / Plugin-SDK

Plugin development kit for the 4th major edition of the HomeSeer platform.
https://www.nuget.org/packages/HomeSeer-PluginSDK/
GNU Affero General Public License v3.0
20 stars 4 forks source link

Downloads non secure #340

Open BernoldNL opened 1 year ago

BernoldNL commented 1 year ago

Is there a technical reason for new releases/betas do be downloaded through http, rather than https, when using the Install buttons from Setup > General > Updates? Or is someone just using old templates to build the update files? :)

rjhelmke commented 1 year ago

There was an issue with some older ZEE S2 hubs where they could not access our system using SSL due to some updates to SSL. I need to check if this is still an issue. PLUS and PRO units can all use SSL so I will make a change for those units. Thanks for pointing this out.

BernoldNL commented 1 year ago

👍

Something identical seems to happen in the Updater(?)

rjhelmke commented 1 year ago

It would be for all downloads to the unit. The best we can probably do is detect the unit type and do an SSL transfer for newer units. I get we always want to be secure, but the downloads are for files that anyone can get anyway, so not sure how important it is that these are SSL. Other connections, like MyHS are always encrypted on all units.