The bug
Multiple download links on minecraft.net use http instead of https. All affected links can be replaced since the respective servers support https. Without HTTPS, some platform users (such as Linux) have no verified chain of trust back to Mojang. This chain of trust is essential for a secure execution environment.
Affected links
Linux
https://minecraft.net/en-us/download/?ref=bm
- Download button on the right: http://s3.amazonaws.com/Minecraft.Download/launcher/Minecraft.jar
- Java download link: http://java.com/
https://account.mojang.com/me
- Link for Tux icon
General
https://minecraft.net/en-us/download/alternative
- relates to
-
WEB-1077 Multiple links on account.mojang.com use http instead of https
-
- Resolved
-
