This host serves signed update artefacts for CCS Phone on macOS and Windows. It is a static file server. It accepts no uploads, publishes no directory listings, and holds nothing that is not also attached to a public GitHub release.
The macOS app is told one appcast URL and the Windows App Installer one manifest URI, and each derives everything else from the file it was given, so there is nothing here for a person to browse. If you are looking for the application itself, it is at the releases page.
Every archive offered to macOS carries an Ed25519 signature that the installed app verifies against a public key compiled into it, and every Windows package is Authenticode signed, with Windows refusing any package whose signature does not match the publisher named in the manifest. A file taken from here that was not published by Coffee Cup Solutions will not install.
Design and reasoning: docs/adr/ADR-0009-desktop-auto-update.md.
Operations: docs/UPDATES.md.