[alexvay]

It's sad that VLC checks updates over HTTP and HTTPS

[jbk]

VLC updates are signed with asymetric encryption.

HTTP or HTTPS does not change that.

[sslalready]

HTTPS would increase user privacy by not leaking application details though.