We would all be satisfied if they took the five minutes to set up a LetsEncrypt certificate.<p>There&#x27;s no excuse not to.<p>Even better: have the developers agree on a set of GPG signatures to sign their builds with. A bit more complicated...