Symptoms
The Microsoft SQL Server 2016 setup page contains links to downloads for SQL Server tools (such as SQL Server Management Studio, SQL Server Data Tool, and so on). However, these links are not secure HTTP-forward links and can be targets for "man-in-the-middle" attacks.
Resolution
This fix is included in Service Pack 2 for SQL Server 2016.
About SQL Server 2016 builds
Each new build for SQL Server 2016 contains all the hotfixes and security fixes that were in the previous build. We recommend that you install the latest build for SQL Server 2016.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
References
Learn about the terminology Microsoft uses to describe software updates.
