lowendbeholder

Joined 6 years ago

Karma

15

Submissions

1

Member since

Nov 15

View on Hacker News

Recent submissions

Comment · 6 years ago

The loop argument makes no sense at all. HTTP is being used as a transport for a base64-encoded payload, the actual process of veryfing the validity of the developer certificate is done by the service behind that Apple URL - not by the HTTP stack.

There is no justification not to switch to HTTPS here.