Closed Silther closed 1 year ago
https://github.com/microsoft/winget-pkgs/pull/87480#issuecomment-1303087253
This was identified as an acceptable URL based on the "aka.ms" URL provided in the PR:
A waiver was granted for that URL.
What exactly does that mean? The URL is not one from microsoft itself, is it?
@SpecterShell,
Can you share how you got to the URL for this package?
https://aka.ms/PCManager500000 Just wondering, why this link wasn't used, but I don't really know how Winget packages work
Generally, we prefer using URLs coming from the "official" site. In some cases, they are redirects, but we understand in many cases the underlying URL may change due to CDN modifications or other changes intentionally performed by ISVs.
The URLs prior to 1.2.6.4 came from https://aka.ms/PCManagerUpgrade10000, which is obtained from their API (https://pcmanager.microsoft.com/config/api/AppConfig). The URLs after that should came from https://aka.ms/PCManager10000, which can be found in https://pcmanager.microsoft.com/en.
So officeplus.cn
is an official microsoft website?
Both OfficePLUS and PC Manager come from Microsoft China.
So
officeplus.cn
is an official microsoft website?
Yes, it is owned by Microsoft China, and you can get the latest download link by curl aka.ms/PCManager10000 -i
like pcmanager.officeplus.cn/mvp/xxx
.
The channel "10000" is the default channel provided at pcmanager.microsoft.com(not pcmanager-en).
Due to legal reasons, PC Manager's official English website provides the aka.ms/PCManager500000
, the 1.2.4 version. For more information, don't hesitate to contact the PC Manager's Operational team through the Discord invite link at the bottom of the PC Manager's English website.
Thank you for experiencing PC Manager. If you face any issue, you can submit it at the in-box feedback function or the Discord server above.
If there's any issue with PC Manager, please feel free to mention me (@LiCaoZ ) so that I can provide you with answers.
Please confirm these before moving forward
Category of the issue
Other
Brief description of your issue
I came across the following package (Microsoft.PCManager), but the download URL (
https://pcmanager.officeplus.cn/mvp/10000/26026/MSPCManagerSetup.exe ...
) seems to be anything but official.Steps to reproduce
search for the PC Manager package
Actual behavior
should show legit URL (https://pcmanager-en.microsoft.com/)
Expected behavior
shows an untrustworthy URL (https://pcmanager.officeplus.cn/mvp/10000/26026/MSPCManagerSetup.exe?sv=2021-06-08&se=2023-06-26T02%3A10%3A43Z&sr=c&sp=rwdl&sig=pDOh8oxm8ifT6anw8tZJNZhQ0WAXW279Le%2BA3rMFM6w%3D)
Environment
Screenshots and Logs