Public bug reported:
The main Ubuntu webpage does not support HTTPS. I think this is a severe
security risk, as software distribution security is an increasing issue.
Currently trying to access www.ubuntu.com over https gives an error and
trying ubuntu.com with https forwards to the http version of
www.ubuntu.com. The latter is especially problematic, as it may give
users a false sense of security.
Ideally all ubuntu webpages should be HTTPS by default and use HSTS.
** Affects: ubuntu
Importance: Undecided
Status: Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1619240
Title:
www.ubuntu.com does not support HTTS, https://ubuntu.com forwards to
http
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/1619240/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
