I tried to download the the source files and debian files for source
package agg, but Chrome blocked the downloads with this message on the
error console:

Mixed Content: The site at 'https://packages.debian.org/' was loaded over a
secure connection, but the file at '
https://deb.debian.org/debian/pool/main/a/agg/agg_2.6.1-r134+dfsg1-2.debian.tar.xz'
was redirected through an insecure connection. This file should be served
over HTTPS. This download has been blocked. See
https://blog.chromium.org/2020/02/protecting-users-from-insecure.html for
more details.


The problem appears to be that the download links at the bottom of the
source page https://packages.debian.org/source/trixie/agg use http: instead
of https:. Clicking on these insecure links results in a 307 temporary
redirect to the corresponding secure link. Chrome seems to block secure
pages with insecure links that redirect to secure locations. The source
page should have secure links.

-- john

Reply via email to