Re: [ft] Freetype HTTPS Download

[Werner LEMBERG]

Hello Jonas,


thanks for your report!

> The download links on https://www.freetype.org/download.html are all
> over HTTP, Freetype.org itself offers HTTPS, as well does Savannah and
> SourceForge (with the exception of gnuwin32), and gtk.org.
> 
> Please update these links to use HTTPS.

Fixed.

> Additionally the link to <http://www.gtk.org/download/win32.php>
> "GTK's download page" is dead.

Updated.

> This is just a quick ping because I could not find a better place to
> send a quick message.

This is the right place :-)

> I am currently updating the freetype port in the Sortix operating
> system and keep an eye out of whether sites follow best practices.
> It could be good if there were SHA256 sums of releases available
> directly on freetype.org.

Please elaborate.  Signature files for FreeType bundles are already
available from both gnu.org and sf.net.  Isn't this sufficient?


    Werner