[Popcon-developers] Bug#880121: Bug#880121: popularity-contest: popcon-upload should be made to POST over https

[Bill Allombert]

On Thu, Jan 04, 2018 at 10:54:42AM +0100, Mateusz Jończyk wrote:
> Hello,
> It is known that NSA was using error messages from Windows to check which
> software is installed on user computers and which software they can hack[1].
> 
> So uploading a list of installed software over plaintext is dangerous.

The list is not in plaintext. It is encrypted with GnuPG before being sent

Cheers,
-- 
Bill. <ballombe at debian.org>

Imagine a large red swirl here.