freedomofpress/securedrop — pull request #564 by DonnchaC (2014-09-10 23:15:45+00:00)
Title: Download Firefox over HTTPS, check for /etc/debian_version

The setup script was not running on my Debian Wheezy system as
the system did not have an /etc/lsb-release file, or a matching file with
a DISTRIB_ID line.

The firefox binary archive was being downloaded over HTTP without
any cryptographic verification.