s&#x2F;posting checksums&#x2F;doing everything on the web&#x2F;<p>It looks like they actually offer https, just don&#x27;t force it. There&#x27;s a good chance they&#x27;re just testing it, seeing as their CA, Let&#x27;s Encrypt, was made available to the public less than a month ago (and their cert&#x27;s validity period starts on the LE public beta launch day, so it&#x27;s unlikely they were part of the private beta):<p><a href="https:&#x2F;&#x2F;www.darktable.org&#x2F;2015&#x2F;12&#x2F;darktable-2-0-released&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.darktable.org&#x2F;2015&#x2F;12&#x2F;darktable-2-0-released&#x2F;</a>