Consider advertising HTTPS URLs

Hi,

In your docs for the sync agent you suggest installing it via powershell.

$o="$HOME.odrive-agent\bin";mkdir “$o” -FORCE;(New-Object System.Net.WebClient).DownloadFile(“http://dl.odrive.com/odrive-py","$o\odrive.py”);(New-Object System.Net.WebClient).DownloadFile(“http://dl.odrive.com/odriveagent-win”, “$o\o.zip”);$shl=new-object -com shell.application; $shl.namespace("$o").copyhere($shl.namespace("$o\o.zip").items(),0x10);del “$o\o.zip”;(New-Object System.Net.WebClient).DownloadFile(“http://dl.odrive.com/odrivecli-win”, “$o\oc.zip”);$shl=new-object -com shell.application; $shl.namespace("$o").copyhere($shl.namespace("$o\oc.zip").items(),0x10);del “$o\oc.zip”;

You should consider using HTTPS since the non TLS encrypted / unauthenticated downloaded file is going the be executed on the host system! Atm, it is sure vulnerable to MITM attacks.

best regards,
Phil

1 Like

Yes, I’ve been meaning to do this. I can probably get it setup today, if I can carve a little bit of time out.

1 Like

This is done now. All http requests are also redirected to https.

2 Likes