HTTPS
Robbert
mail at robbertbroersma.nl
Thu Mar 6 14:54:18 CST 2014
Hi,
For tools that rely on the Unicode database it would be great if the databases were available over HTTPS as well:
https://www.unicode.org/Public/6.3.0/
In addition to this it would be helpful if the archive also contains SHA512 checksum files for each Unicode version to verify the integrity of databases that have already been downloaded (over HTTP), e.g.:
https://www.unicode.org/Public/6.3.0/SHA512SUMS
Mozilla already offers such checksums, although unfortunately not over HTTPS, but they can serve as an example.
http://releases.mozilla.org/pub/mozilla.org/firefox/releases/27.0/SHA512SUMS
I think this would improve the security of many libraries that directly and indirectly depend on Unicode.
Kind regards,
Robbert Broersma
More information about the Unicode
mailing list