5 ms·
This is HTTP though, not HTTPS. You're not just trusting the authors, but also trusting the network.
by heinrich5991 10y ago
This is HTTP though, not HTTPS. You're not just trusting the authors, but also trusting the network.
- dahart 10y agoYes, absolutely! So package validation is the issue for you. But how certain are you about everything else you install using HTTPS? (I'm honestly asking, not being rhetorical.) And what is stopping anything else you install from downloading something over HTTP, and executing it?
- deleted 10y ago[deleted]