From 4556d383471d439beb2445237eb4f5e95abf6877 Mon Sep 17 00:00:00 2001 From: wiillownet <239251507+wiillownet@users.noreply.github.com> Date: Tue, 13 Oct 2026 06:41:27 -0700 Subject: [PATCH] fix: probe the retro wfc payload at its current https endpoint --- .../Features/Recomp/RecompRetroWfcPayloadProbe.cs | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/WheelWizard/Features/Recomp/RecompRetroWfcPayloadProbe.cs b/WheelWizard/Features/Recomp/RecompRetroWfcPayloadProbe.cs index 90e60c4f6..151437f75 100644 --- a/WheelWizard/Features/Recomp/RecompRetroWfcPayloadProbe.cs +++ b/WheelWizard/Features/Recomp/RecompRetroWfcPayloadProbe.cs @@ -23,12 +23,11 @@ public sealed class RecompRetroWfcPayloadProbe(IHttpClientFactory httpClientFact /// /// The fixed payload endpoint the setup host downloads from. It must stay identical to the value pinned /// in the recomp's RetroWfcPayload.CurrentRetroWfcPayloadUri, since probing anything else says - /// nothing about whether the host's own download will succeed. Plain HTTP is what the service offers - /// and what the host pins; that is safe here because this probe decides nothing about trust. The host - /// verifies the payload's RSA signature itself, so a forged answer can at worst make the host attempt - /// a download that its own verification then rejects. + /// nothing about whether the host's own download will succeed. This probe decides nothing about trust: + /// the host verifies the payload's RSA signature itself, so a forged answer can at worst make the host + /// attempt a download that its own verification then rejects. /// - public const string PayloadUri = "http://nas.play.rwfc.net/payload?g=RMCPD00"; + public const string PayloadUri = "https://rwfc.net/api/wfc/payload?g=RMCPD00"; // A dead endpoint times out rather than refusing, so a short cap is what keeps the home page and the // install flow from stalling on every status refresh while the service is down.