install.elm-lang.org SSL certificate problem.

[Richard Rasu]

Hi, sorry if this is the wrong place for this, but I noticed install.elm-lang.org downloads (for the windows installer in my case, but also for the os x installer) is linked using http from guide.elm-lang.org/install.html.

hitting the linked file using https instead, returns this warning from firefox:
install.elm-lang.org uses an invalid security certificate. The certificate is only valid for the following names: *.akamaized.net, *.akamaihd-staging.net, *.akamaized-staging.net, *.akamaihd.net, a248.e.akamai.net Error code: `SSL_ERROR_BAD_CERT_DOMAIN

I'd recommend someone look at the certificate issue on install.elm-lang.org as linking to downloads over non-https these days should be considered dangerous. (I did not see any obvious checksums to verify any downloads against, but again these would have to be offered over https).

Best regards

R

[Process Bot]

Thanks for the issue! Make sure it satisfies this checklist. My human colleagues will appreciate it!

Here is what to expect next, and if anyone wants to comment, keep these things in mind.

[Evan Czaplicki]

I just messed with the CNAME of that domain so it goes to RackSpace's HTTPS endpoint instead.

I also changed the links in guide.elm-lang.org to go to an HTTPS endpoint that should work.

Thanks for the issue!