We are doing our scheduled PCI scan and for some odd reason, this year they aren't letting the magentostore.com/downloader url slide. It's being marked as an automatic failure due to the plain text form.
They are saying this URL should be HTTPS.
I looked at some of the biggest sites using MagentoCE and Eneterprise, and they too use an HTTP url for the Magento Connect /downloader/ url.
Any help on this matter is greatly appreciated.