Bug 430116

Summary:	Downloading kdenlive for windows in chrome does not work, download URL is served over http and raises a mixed content error in the console
Product:	[Websites] www.kde.org	Reporter:	matatacmca
Component:	general	Assignee:	kde-www mailing-list <kde-www>
Status:	RESOLVED FIXED
Severity:	normal	CC:	bcooksley
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	unspecified
OS:	Microsoft Windows
Latest Commit:		Version Fixed In:
Attachments:	screenshot of download page and console with error

Description matatacmca 2020-12-07 17:44:23 UTC

Created attachment 133920 [details]
screenshot of download page and console with error

SUMMARY
Downloading kdenlive for windows in chrome does not work, download URL is served over http and raises a mixed content error


STEPS TO REPRODUCE
1. visit https://kdenlive.org/en/download/ using Google chrome
2. Click the windows installer download
3. The following error will display in the developer console (visible by pressing F12 or Ctrl+Shift+I) -  Mixed Content: The site at 'https://kdenlive.org/' was loaded over a secure connection, but the file at 'http://linorg.usp.br/kde/downloads/stable/kdenlive/20.08/windows/kdenlive-20.08.3.exe' was redirected through an insecure connection. This file should be served over HTTPS. This download has been blocked. See https://blog.chromium.org/2020/02/protecting-users-from-insecure.html for more details. 

OBSERVED RESULT
an end user who does not know how to access the developer console would not be able to download the installer, and so cannot use your software


EXPECTED RESULT
the file to start downloading


SOFTWARE/OS VERSIONS
Windows: 10
macOS: 
Linux/KDE Plasma: N/A
(available in About System)
KDE Plasma Version: N/A 
KDE Frameworks Version: N/A
Qt Version: N/A

ADDITIONAL INFORMATION

Comment 1 Ben Cooksley 2020-12-07 18:11:34 UTC

I've now disabled all of the HTTP only mirrors we have - this may leave some areas of the globe a little light on mirror coverage but will resolve the issue.