3 ms·
But you're verifying the signature of the tarball first, right?
by feld 10y ago
But you're verifying the signature of the tarball first, right?
- geofft 10y agoAlmost all of the examples on that page use curl https:// https:// | sh. Which, again, makes it a superior option to wget && gpg --verify && ./configure; I have yet to see anyone who is better at PGP fingerprint verification than their OS's SSL stack is at TLS certificate verification. (There are a very small number of people who are as good, but not better.)