This is long overdue. Cisco's decade-long refusal to deliver binaries, or even hashes of the binaries, over an https connection astounds me.