Comment by jammygit

I noticed the update mirror uses http. In my inexperience, I'm not sure whether this introduces a MitM vector or not.

Can anybody comment?