Hi folks, We are currently working on more https enablement for the openSUSE download tooling. Background is that safe repository usage is possible for the main and update repositories, but not for the rest buildservice repositories, which have unknown keys. software.opensuse.org and download.opensuse.org can provide https URLs already. The problem we are facing is that download.opensuse.org redirects from HTTPS to HTTP, which is caught by various clients as a security violation. So to avoid making clients less secure, we would like to know if some of you can offer https serving mirrors of openSUSE. With the availability of letsencrypt this can even be done without any additional costs. A low footprint client for letsencrypt is dehydrated (https://github.com/lukas2511/dehydrated), which can also be obtained as packages for openSUSE, SLES, CentOS and RHEL from https://software.opensuse.org/download.html?project=security:dehydrated&package=dehydrated. Ciao, Marcus