From 67c6ca1fb37b171f8986e696e8c76c7533f1d044 Mon Sep 17 00:00:00 2001
From: Leah Woods <info@minifree.org>
Date: Sun, 08 May 2016 09:22:49 -0400
Subject: prioritise HTTPS mirrors on the download page

---
(limited to 'site/download')

diff --git a/site/download/index.php b/site/download/index.php
index 2166ebf..aa409ce 100644
--- a/site/download/index.php
+++ b/site/download/index.php
@@ -49,7 +49,20 @@
 				also includes links to the Git repositories.
 			</p>
 
+            <h2 id="https">HTTPS mirrors</h2>
+                <p>
+                    These mirrors are recommended, since they use TLS (https://) encryption.
+                </p>
+<?php
+                echo mirrorList($lbHttpsMirror, gettext("HTTPS mirrors not added yet."),0,count($lbHttpsMirror));
+?>
 			<h2 id="http">HTTP mirrors</h2>
+                <p>
+                    WARNING: these mirrors are non-HTTPS which means that they are unencrypted. Your traffic could be subject
+                    to interference by adversaries. Make especially sure to check the GPG signatures, assuming
+                    that you have the right key. Of course, you should do this anyway, even if
+                    using HTTP.
+                </p>
 <?php
 				/* show HTTP mirrors */
 				echo mirrorList($lbHttpMirror, gettext("HTTP mirrors not added yet."),0,count($lbHttpMirror));
--
cgit v0.9.1