Hacker News Reader

It's sad that VLC checks updates over HTTP and HTTPS

VLC updates are signed with asymetric encryption.

HTTP or HTTPS does not change that.

HTTPS would increase user privacy by not leaking application details though.

Indeed, but that's not what GP is referring to.