3 ms·
A system for signed installers to replace curl | sh
- smt88 11y agoThis seems to make downloading scripts safer when encryption isn't supported by the server. Is that true, or am I way off base? (For those reading who are incredulous that a reasonable person would ask you to download an installation script over unencrypted HTTP, you are right to be incredulous. Even some large-ish companies do it. It's insane.)
- gemma 11y agoYup. It adds an extra identity verification layer, whether your script is served over SSL or not.
- gemma 11y agoAuthor here, just noticed this submission. Happy to answer any questions. (You may also be interested in the discussions on Proggit[0] and /r/golang[1].) [0] https://www.reddit.com/r/programming/comments/426zsv/pipethis_stop_piping_the_internet_into_your_shell/ https://www.reddit.com/r/programming/comments/426zsv/pipethi... [1] https://www.reddit.com/r/golang/comments/4261he/pipethis_stop_piping_the_internet_into_your_shell/ https://www.reddit.com/r/golang/comments/4261he/pipethis_sto...