Is there a safe way to download the java JDK? [closed]

Question

When I go to the official website to download the Java JDK and attempt to download the JDK, I get an error stating that the SSL certificate for Oracle's download site is invalid.

After some googling, the certificate appears to have never been valid (or been invalid for a very long time).

The error says "This Connection Is Untrusted" in Firefox, and the technical details say:

download.oracle.com uses an invalid security certificate. 
The certificate is only valid for the following names: *.akamaihd.net, *.akamaihd-staging.net, a248.e.akamai.net, *.akamaized.net, *.akamaized-staging.net 

In Chrome, the error says "Your connection is not private", with a similar message in the advance info.

After looking for a long time, I can find very little info on this problem via the usual search engines.

Why is the certificate invalid, and what is a good trustworthy way to get the file?

Answer 1

The oracle java download site was never designed to use SSL.

The site in this case is only using SSL because of the HTTPSEverywhere browser plugin that I have installed, which is forcing all Oracle domains to use HTTPS when contacted by my browser.

In order to make the download work, I disabled HTTPSEverywhere for the oracle domains. This effectively exposed how the site is actually designed to work (it did not default to SSL), and it allowed the download to proceed without warnings. This indicates that clicking through the warning (no need to disable HTTPSEverwhere in this case) should be okay.

I write this answer here because of the great difficulty of finding any information on this problem via google.