[isabelle-dev] Use HTTPS for components

[Makarius]

On 13/07/16 13:21, Lawrence Paulson wrote:
> I’m not sure that digitally signed components are really something to work on now.

I've asked myself this question occasionally, just to get rid of
additional user interaction when running the main Isabelle application
for the first time on Mac OS X or Windows. I.e. system dialogs like "I
really want to run this application, even though it is not signed by the
provider."

In general, code signing and app-stores do not seem to add much
security, e.g. see the recent ransomware incident:
http://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infected-transmission-bittorrent-client-installer


We should work towards a safer internet: by de-escalating global aggression.


	Makarius