Last updated date of affected page: 27-09-2023
When reading this article, there's an http link leading to the download page, which should be https.
This link can be found by clicking on the "download the minecraft launcher" link in the top paragraph
Linked issues
relates to 1
Comments 7
Checked the download link from the top paragraph of the article. It opens with https. Closing as Cannot Reproduce.
@@unknown, this is about the URL used in the link; you can see that by inspecting the HTML or hovering over the link (for Firefox and Edge the URL preview in the bottom left corner has no https:// prefix). minecraft.net will redirect http:// to https:// which is why you eventually will see that the page opens with https://. However, the issue is that initially the browser makes a request with http:// and a malicious user in the same network could perform a man-in-the-middle attack where they serve a malicious minecraft.net page, and that would work because the inital browser request was using http:// instead of https:// (unless you have custom browser settings or extensions which enforce HTTPS).
Going to reopen this report, I hope that is alright.
Closed as cannot reproduce as web page no longer exists