Dropbox: Fedora installation instructions fetch repo and validation key from insecure source, allowing mitm attack

The reporter noted that our installation instructions for our Linux Desktop Client for Fedora specified HTTP urls instead of HTTPS. This could allow an attacker, with a privileged network position, the ability to swap the GPG key during installation allowing them to install a rogue signing key on...