[Bug 911497] Downloads from download.opensuse.org and mirrors open to man-in-the-middle attacks