7 ms·

Wait, what are you checking? I hope it is package signatures, not web server certificates. For security, my normal software development environment is off the

• steveklabnik 8y ago
  So, to be clear, the linked thread is about rustup. If you don't install rust via rustup, then the above issue will never happen to you. By default, it's checking that you have an SSL connection, yes. You can fully build and develop Rust projects offline; this is a hard requirement of things like Debian and Firefox, for example.
  • burfog 8y ago
    If rustup is the normal way to install rust, then that is exactly what I'd want to use. My employer would mirror the needed web sites. For example, my employer mirrors much of github and ubuntu and various Microsoft things. I just follow the normal instructions to fetch things on the internet, and it all works from the mirrored web sites.
    • steveklabnik 8y ago
      It’s the default choice, yes. However, If you’re using Ubuntu you could also install it through apt, though you’ll get an older version.
      • burfog 8y ago
        Note how Ubuntu does things correctly, using signatures on the packages. I can copy those to any web site. Doing things that way helps you too. Mirrors, including caches, are easy to set up. Installing via apt will not work for Windows users.
        • steveklabnik 8y ago
          Sure, we check signatures too. (At least, Cargo does. I think rustup may not in some circumstances? I forget) It's about defense in depth. I am a Windows user, I know that. That's why i said "if" :)