Multiple download links on minecraft.net and account.mojang.com use http instead of https

The bug

Multiple download links on minecraft.net use http instead of https. All affected links can be replaced since the respective servers support https. Without HTTPS, some platform users (such as Linux) have no verified chain of trust back to Mojang. This chain of trust is essential for a secure execution environment.

Affected links

Linux

https://minecraft.net/en-us/download/?ref=bm

• Download button on the right: http://s3.amazonaws.com/Minecraft.Download/launcher/Minecraft.jar
• Java download link: http://java.com/

https://account.mojang.com/me

• Link for Tux icon

General

https://minecraft.net/en-us/download/alternative

• Mac: http://launcher.mojang.com/download/Minecraft_legacy.dmg