assigned to @tlattner

Considering what http://llvm.org/apt/ offers, you'd expect https://llvm.org/apt/ to work, but it doesn't. Not even for the GPG key.

Please enable secure downloads for the GPG key at the very least!

It'd also be nice if Bugzilla worked over HTTPS.

*** Bug llvm/llvm-bugzilla-archive#21649 has been marked as a duplicate of this bug. ***

Oddly, while
https://llvm.org/PRnnnn
returns a 404,
http://llvm.org/PRnnnn
will redirect to
https://llvm.org/bugs/show_bug.cgi?id=nnnn

Also subsites like clang.llvm.org, when accessed via HTTPS, throw up a browser warning page because they are reporting their domain name as llvm.org... https://clang.llvm.org

*** Bug llvm/llvm-bugzilla-archive#31479 has been marked as a duplicate of this bug. ***

This was fixed at some point -- https://llvm.org/ isn't 404 anymore, but now shows the LLVM front page. (same as the insecure HTTP version of that URL)

These sites mentioned in other comments all load fine for me, too:
https://clang.llvm.org/
https://llvm.org/apt/
llvm/llvm-bugzilla-archive#15653 (replacing "nnnn" with an actual bug number)

Thanks for fixing this issue. It's great security improvement ,)

Should I open a new bug to have http redirect automatically to https?

If you have auto-redirect to HTTPS set up you should also consider enabling HSTS to prevent downgrade attacks.

mentioned in issue llvm/llvm-bugzilla-archive#21649

mentioned in issue llvm/llvm-bugzilla-archive#31479