Recent content by msteinmann

  1. Insecure HTTP download of preseed file by installer

    Thanks for the fast response. I redownloaded the current ISO and it is still specifying to download the preseed file from HTTP, see for example boot/grub/grub.cfg: linux /install.amd/vmlinuz vga=788 ipv6.disable=1 auto=true priority=high...
  2. Insecure HTTP download of preseed file by installer

    The official Debian installer ISO of 3CX v20 downloads a Debian installer preseed file via unencrypted HTTP from http://downloads-global.3cx.com/downloads/debian12iso/preseed_12.1.0_46a7ea2.txt This is configured as a boot parameter for the ISO via the "url=" parameter Download is unencrypted...