Can't download package with Chrome like due to Mixed Content

Bug #1943015 reported by Pierre BLONDEAU
18
This bug affects 3 people
Affects Status Importance Assigned to Milestone
pkg-website
Confirmed
Undecided
Unassigned

Bug Description

Hello,

Chrome change politicks with mixed content page :
https://blog.chromium.org/2020/02/protecting-users-from-insecure.html

For exemple :
https://packages.ubuntu.com/focal/amd64/transmission-daemon/download
We can't direct download :
http://mirrors.kernel.org/ubuntu/pool/universe/t/transmission/transmission-daemon_2.94-2ubuntu3_amd64.deb

But if we copy/paste link in new tab, it works.

It works too with https link :
https://mirrors.kernel.org/ubuntu/pool/universe/t/transmission/transmission-daemon_2.94-2ubuntu3_amd64.deb

The https is obligatory on packages.ubuntu.com pages. So could you update packages link in https to ?

Regards,

Steve Langasek (vorlon)
Changed in pkg-website:
status: New → Confirmed
Revision history for this message
Rhonda D'Vine (rhonda) wrote :

You can right-click on the link and choose safe-as, that works for http links.

I likely should go through the mirror list, potentially throw out all the non-http mirrors (which ironically would also throw out archive.ubuntu.com ...) and switch the others to https. An updated suggested mirror list to use might be very useful, including ones for the ports archive. I hope someone from canonical can give me a helping hand for that?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.