prioritise HTTPS mirrors on the download page

1 files changed, 13 insertions, 0 deletions

diff --git a/site/download/index.php b/site/download/index.php
index 2166ebf..aa409ce 100644
--- a/site/download/index.php
+++ b/site/download/index.php
@@ -49,7 +49,20 @@
 				also includes links to the Git repositories.
 			</p>
 
+            <h2 id="https">HTTPS mirrors</h2>
+                <p>
+                    These mirrors are recommended, since they use TLS (https://) encryption.
+                </p>
+<?php
+                echo mirrorList($lbHttpsMirror, gettext("HTTPS mirrors not added yet."),0,count($lbHttpsMirror));
+?>
 			<h2 id="http">HTTP mirrors</h2>
+                <p>
+                    WARNING: these mirrors are non-HTTPS which means that they are unencrypted. Your traffic could be subject
+                    to interference by adversaries. Make especially sure to check the GPG signatures, assuming
+                    that you have the right key. Of course, you should do this anyway, even if
+                    using HTTP.
+                </p>
 <?php
 				/* show HTTP mirrors */
 				echo mirrorList($lbHttpMirror, gettext("HTTP mirrors not added yet."),0,count($lbHttpMirror));