News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • MS Catalog not secure

    Home Forums AskWoody support Windows Windows 10 Questions: Win10 MS Catalog not secure

    Viewing 4 reply threads
    • Author
      Posts
      • #2317147
        anonymous
        Guest

        I saw where an Intel microcode update for my system was available to download via the MS update catalog.

        Went to download it and noticed the site is http and not https. Tried changing it to https and site won’t work. Clicked on the download button for the update and it comes up in a new window, still http only.

        I did not download it as I was concerned about security (the lack thereof). How big of a concern is this or is it safe to download from the catalog if needed?

      • #2317176
        EP
        AskWoody_MVP

        not a big deal
        go ahead and download from MS Catalog regardless

        regarding http and https, read this from Palemoon forums:
        https://forum.palemoon.org/viewtopic.php?f=24&t=22698

        • This reply was modified 1 month, 3 weeks ago by EP.
        • This reply was modified 1 month, 3 weeks ago by EP.
      • #2317182
        Kirsty
        Manager

        This isn’t news!

        See: from February 2018
        Microsoft using insecure HTTP links to distribute security patches through the Update Catalog

        I’d suggest doing a search site before posting, in line with Da Rules 🙂

      • #2317195
        anonymous
        Guest

        All of the updates are signed with certificates, you should not be able to install a Windows update without a signature. Although these files are signed, it is good practice to scan all files downloaded from somebody else’s computer. 🙂

      • #2317224
        Susan Bradley
        Manager

        https://www.catalog.update.microsoft.com/Home.aspx  The site or the download itself?  I can get to the site over SSL?

         

        Susan Bradley Patch Lady

        • #2317235
          Kirsty
          Manager

          The downloads themselves, as per Woody’s article, linked above.

        • #2317327
          anonymous
          Guest

          Looking at the certificate Microsoft just added that in mid-November, glad they finally did add a secure page. 🙂

    Viewing 4 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: MS Catalog not secure

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.

?
This website collects data via Google Analytics. Click here to opt in. Click here to opt out.
×