https://sparkle-project.org/documentation/security/
since a http url is used, it is susceptible to a man in the middle attack