4 ms·
Yes, try it. Unless something has changed drastically curl still checks that certificates are valid.
by vegardx 8y ago
Yes, try it. Unless something has changed drastically curl still checks that certificates are valid.
- v_lisivka 8y agoIt looks like you assume that SSL guarantees correctness of the file. First, I had experience with substituted SSL certificates (by our government, at revolution), when errors were reported by Chrome only due to certificate pinning for Google services. Second, site can be hacked and replaced directly at the site.
- vegardx 8y agoWhen your threat level is government agencies then, sure, you have issues. But git wouldn't solve anything, unless you have a way to verify the hash or signature.