Brackets: Website needs HTTPS

[rugk]

http://brackets.io/ is only available over HTTPS. This is not only quite bad for the usual reasons, it's even a security issue as thee is a download link in the site. So actually everyone can intercept that link there and modify it to e.g. point to their own (malicious) version of Brackets.

Why you should always use HTTPS (no matter whether the site is static etc.):

• https://doesmysiteneedhttps.com/
• IT security specialist: https://scotthelme.co.uk/still-think-you-dont-need-https/
• Google: https://developers.google.com/web/fundamentals/security/encrypt-in-transit/why-https

[schwarrrtz]

@zaggino @saurabh95 not sure who to tag here... I want to use brackets, but I'm not downloading an installer over an unencrypted connection... C'mon guys, this is 2018. Can you at least put instructions for running the app from source in the readme, if you can't host the installer on a secure site?

[saurabh95]

You can download the installer directly from https://github.com/adobe/brackets/releases/tag/release-1.13 also.

[webash]

Being able to download something somewhere else isn't reason to not have HTTPS on the main website. If you even can download something from the site, then (amongst all the other reasons) you MUST have HTTPS. This was raised in 2018 and 2 years later still not fixed?

[rugk]

Haha, always funny to see such old issues in m GitHub notifications… especially if a critical website does not have HTTPS in 2020… :laughing: :rofl:

I guess this is enough reason not to use the software…