It appears the build process still uses unverified http wget sources

It is 2016 not 2001 and MITM's are a regular thing so this is a serious 
issue.

[Nico Huber]

On 06.11.2016 22:44, [e-mail] wrote:
> It is 2016 not 2001 and MITM's are a regular thing so this is a serious
> issue.

Yes, YOU haven't fixed that yet.