Security issue on updates

[alphapapaactual]

Hi, 

Why is Samsung distributing update via unencrypted http endpoints? My router blocked access to fota-s3-dn.ospserver.net:80, seccfl-fota-dn.samsungdm.com:80 and 1.ssiloc.com:80. Adressed the updates as malware... 

[JakeSully]

Just because you see adress without http or https does not mean it is unencrypted. Your router could be fasiley giving false positive. Some antivirus and detections in routers
Detects some sites as infected when they are not.

[alphapapaactual]

My point here is to question why use port 80 and not 443? It is more secure

[JakeSully]

Well for updates I don't think it really matters since you Download an update.

[janssonrip]

If the connection is encrypted, phones with expired or missing certificates won't be able to download updates. That is also why certificate stores usually allow downloading certificate updates unencrypted.

Integrity checks of the downloaded files mitigate potential MITM risks.

[alphapapaactual]

But if that happens people should do updates by downloading from a computer and then upgrade from usb... This is just unsecure...