SSL Updates

[bored-engineer]

The updates are currently downloaded via http, which is insecure and could allow unauthorized access via mitm. Updates and checks should be served via SSL. It does not need to be a valid SSL cert if the root ca were installed as part of the update.

[riptidewave93]

This is currently a planned feature that will be added to Team Eureka's first ROM release. Thanks for the report!

[riptidewave93]

This feature will probably be put on hold. Due to the fact that the google toolchain has no support for OpenSSL or GNUTLS, we are currently unable to compile in SSL support into curl or wget.

But, we are workin with the possibility of using a signing key for the zip files which would still prevent mitm attacks and corrupt downloads.

[riptidewave93]

Just as a update, @tchebb thinks he found a way to add SSL support to the toolchain, so this may be possible now.