https://github.com/gnachman/iTerm2/blob/master/plists/releas...
Likewise, all HTTPS here:
http://iterm2.com/appcasts/testing3.xml
If you're on Mac OS 10.11, we don't disable app transport security, so the OS prevents us from making HTTP requests at all.
And what about the risk of parsing file:// and ftp:// and other protocols inside the WebView component What assurances can you give that there is not security flaw on the server that allows replacing XML file?
It seems a little debugging with LittleSnitch/Charles would glean an answer how the requests are made and what, if anything else is. Perhaps a ticket https://iterm2.com/bugs is warranted.
I would just like to know before I install. I don't think it is too unreasonable of a prerequisite.