HTTPS

Robbert mail at robbertbroersma.nl
Thu Mar 6 14:54:18 CST 2014


Hi,

For tools that rely on the Unicode database it would be great if the databases were available over HTTPS as well:
https://www.unicode.org/Public/6.3.0/

In addition to this it would be helpful if the archive also contains SHA512 checksum files for each Unicode version to verify the integrity of databases that have already been downloaded (over HTTP), e.g.:

https://www.unicode.org/Public/6.3.0/SHA512SUMS

Mozilla already offers such checksums, although unfortunately not over HTTPS, but they can serve as an example.

http://releases.mozilla.org/pub/mozilla.org/firefox/releases/27.0/SHA512SUMS

I think this would improve the security of many libraries that directly and indirectly depend on Unicode.

Kind regards,
Robbert Broersma



More information about the Unicode mailing list