Created attachment 205621 [details]
Add HTTPS link to MASTER_SITES
Please add a few words of discussion or motivation why we should do this.
We have checksums, but that argument goes either way, either (a) we don't need HTTPS, or - opposite argument - (b) if we add untrusted sites, we'll still trust the tarball if the checksum matches.
A commit references this bug:
Date: Tue Jul 9 21:44:31 UTC 2019
New revision: 506319
Switch db5/db6 to download from Oracle's https:// sites.
The http:// sites issue 301-type redirects to https:// so we can spare
everyone the roundtrip.
Submitted by: Miyashita Touka
Comment on attachment 205621 [details]
In fact, Oracle offer the files by https:// as well and redirects from http:// to https://. I have committed a change tracking that, so this one isn't needed.