unicode.org and www.unicode.org are now available over HTTPS. E.g. https://unicode.org/Public/10.0.0/
On Thu, Mar 6, 2014 at 3:54 PM, Robbert <[email protected]> wrote: > Hi, > > For tools that rely on the Unicode database it would be great if the > databases were available over HTTPS as well: > https://www.unicode.org/Public/6.3.0/ > > In addition to this it would be helpful if the archive also contains > SHA512 checksum files for each Unicode version to verify the integrity of > databases that have already been downloaded (over HTTP), e.g.: > > https://www.unicode.org/Public/6.3.0/SHA512SUMS > > Mozilla already offers such checksums, although unfortunately not over > HTTPS, but they can serve as an example. > > http://releases.mozilla.org/pub/mozilla.org/firefox/ > releases/27.0/SHA512SUMS > > I think this would improve the security of many libraries that directly > and indirectly depend on Unicode. > > Kind regards, > Robbert Broersma > _______________________________________________ > Unicode mailing list > [email protected] > http://unicode.org/mailman/listinfo/unicode >

