isn't it kind of dumb having your virus definitions on an unsecure server (http vs https)?
downloads are not secure and I would think anyone could alter them.

Clamwin uses virus signatures & scan engine provided by the Clam AV
Project. If you think their system is insecure,, I suggest you visit their site and tell them about it. You may
learn something that you did not know. At any rate, they will appreciate your interest
and concern.

Regards,