No TLS for static GTFS

[Todd Bednarczyk]

Hi all,

I noticed that there is no TLS when downloading the static gtfs files. I'm concerned about a potential man in the middle attack with no way to verify the integrity of the files.

Maybe I missed it, but is there anyway to download these files securely or at least a checksum that we can download securely in order to verify the files before un-ziping them?

Thanks,

Todd

[Dillon Shen-Cruz]

Thanks for flagging, Todd. We're looking into this internally.

[Todd Bednarczyk]

Thanks Dillon.