Download through HTTPS for authenticity and privacy (fixes #48)