Minecraft News is served insecurely

Sadly tumblr doesn't support SSL for whatever reason, forcing the launcher to serve the page http://mcupdate.tumblr.com insecurely.
This allows an attacker to easily trick users into downloading malicious software, see proof of concept:

I suggest hosting the page yourself or using a different site that's able to cope with 2015 security standards.