From d2a28f5ee60155ec6572ffe7440bd226cf225f5a Mon Sep 17 00:00:00 2001 From: Ben Hutchings Date: Thu, 10 Sep 2020 21:42:53 +0100 Subject: Update URL for Mercurial tarball HTTP is unauthenticated and so subject to man-in-the-middle attacks. Use https for this. Also use the hostname mercurial-scm.org; mercurial.selenic.com is still an alias for it but is not included in the server's TLS certificate. --- open-source-lorries/mercurial-tarball.lorry | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/open-source-lorries/mercurial-tarball.lorry b/open-source-lorries/mercurial-tarball.lorry index cd474b7..2256ae5 100644 --- a/open-source-lorries/mercurial-tarball.lorry +++ b/open-source-lorries/mercurial-tarball.lorry @@ -1,6 +1,6 @@ { "mercurial-tarball": { "type": "tarball", - "url": "http://mercurial.selenic.com/release/mercurial-1.9.3.tar.gz" + "url": "https://mercurial-scm.org/release/mercurial-1.9.3.tar.gz" } } -- cgit v1.2.1