[Bugs] #1349 HIGH: Use https:// for getting update info

[SugarLabs Bugs]

#1349: Use https:// for getting update info
----------------------------+-----------------------------------------------
    Reporter:  alsroot      |          Owner:  tomeu      
        Type:  defect       |         Status:  new        
    Priority:  High         |      Milestone:  0.86       
   Component:  sugar        |        Version:  0.85.x     
    Severity:  Unspecified  |       Keywords:             
Distribution:  Unspecified  |   Status_field:  Unconfirmed
----------------------------+-----------------------------------------------
 For now sugar-updater uses http:// for getting metadata(including hashes
 for updates). It could be more secure to use https:// for this purpose and
 check hashes of downloaded bundles.

 Since sunjummer uses CAcert, sugar should be aware of these certs.

-- 
Ticket URL: <http://dev.sugarlabs.org/ticket/1349>
Sugar Labs <http://sugarlabs.org/>
Sugar Labs bug tracking system