Warren ( i guess some of you knows him ) pointed to me that the repo
rpm
file was downloaded from a http server, not a https one, and well he has
a point. So i'm gonna make a cert on
https://letsencrypt.org/ and setup
the https vhost for
download1.rpmfusion.org.
It would probably a good idea to include
rpmfusion.org on this cert and
server the whole website over https.