{"action":"created","issue":{"url":"https://api.github.com/repos/CausalityLtd/ponyc/issues/446","labels_url":"https://api.github.com/repos/CausalityLtd/ponyc/issues/446/labels{/name}","comments_url":"https://api.github.com/repos/CausalityLtd/ponyc/issues/446/comments","events_url":"https://api.github.com/repos/CausalityLtd/ponyc/issues/446/events","html_url":"https://github.com/CausalityLtd/ponyc/issues/446","id":123130692,"number":446,"title":"[security] Key hosted on HTTP","user":{"login":"purpleidea","id":135091,"avatar_url":"https://avatars.githubusercontent.com/u/135091?v=3","gravatar_id":"","url":"https://api.github.com/users/purpleidea","html_url":"https://github.com/purpleidea","followers_url":"https://api.github.com/users/purpleidea/followers","following_url":"https://api.github.com/users/purpleidea/following{/other_user}","gists_url":"https://api.github.com/users/purpleidea/gists{/gist_id}","starred_url":"https://api.github.com/users/purpleidea/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/purpleidea/subscriptions","organizations_url":"https://api.github.com/users/purpleidea/orgs","repos_url":"https://api.github.com/users/purpleidea/repos","events_url":"https://api.github.com/users/purpleidea/events{/privacy}","received_events_url":"https://api.github.com/users/purpleidea/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-12-20T03:56:49Z","updated_at":"2015-12-22T01:15:42Z","closed_at":null,"body":"Whoa... Friendly notice:\r\n\r\nThis is recommended on the main page:\r\n\r\n`$ wget -O - http://releases.ponylang.org/buildbot@lists.ponylang.org.gpg.key | sudo apt-key add -`\r\n\r\nWhile piping things to sudo anything is usually not the best idea, and downloading random keys is also a bad idea, doing it over HTTP is particularly bad.\r\n\r\nAt a minimum, switch to HTTPS or host it on github until then. There's no excuse since \"let's encrypt\" now exists.\r\n\r\nCheers!"},"comment":{"url":"https://api.github.com/repos/CausalityLtd/ponyc/issues/comments/166471718","html_url":"https://github.com/CausalityLtd/ponyc/issues/446#issuecomment-166471718","issue_url":"https://api.github.com/repos/CausalityLtd/ponyc/issues/446","id":166471718,"user":{"login":"purpleidea","id":135091,"avatar_url":"https://avatars.githubusercontent.com/u/135091?v=3","gravatar_id":"","url":"https://api.github.com/users/purpleidea","html_url":"https://github.com/purpleidea","followers_url":"https://api.github.com/users/purpleidea/followers","following_url":"https://api.github.com/users/purpleidea/following{/other_user}","gists_url":"https://api.github.com/users/purpleidea/gists{/gist_id}","starred_url":"https://api.github.com/users/purpleidea/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/purpleidea/subscriptions","organizations_url":"https://api.github.com/users/purpleidea/orgs","repos_url":"https://api.github.com/users/purpleidea/repos","events_url":"https://api.github.com/users/purpleidea/events{/privacy}","received_events_url":"https://api.github.com/users/purpleidea/received_events","type":"User","site_admin":false},"created_at":"2015-12-22T01:15:42Z","updated_at":"2015-12-22T01:15:42Z","body":"> probably just stop signing our packages.\r\nDon't do this, signed packages are a good thing!\r\n\r\nGood luck!"}}