The bug

The Minecraft tumblr page is loaded unencrypted by the Java Minecraft launcher:

protected JPanel createLauncherInterface() {
    JPanel result = new JPanel(new BorderLayout());
    
    this.tabPanel.getBlog().setPage("http://mcupdate.tumblr.com");
    ...
}

It might be good to remove it complete since no new content is posted on this page anymore.

Affected versions

Currently tracked here since selectable launcher versions here in Mojira are not always up to date

• 1.6.84-j