3 ms·
That looks vulnerable to MITM since it doesn't use HTTPS. Indeed, I just looked it up, it's not in the HSTS preload lists of any browser: https://www.ssllabs.co
by heinrich5991 7y ago
That looks vulnerable to MITM since it doesn't use HTTPS. Indeed, I just looked it up, it's not in the HSTS preload lists of any browser: https://www.ssllabs.com/ssltest/analyze.html?d=get.docker.com&s=2600%3a9000%3a21c4%3a200%3a10%3aa463%3a3d00%3a93a1&latest https://www.ssllabs.com/ssltest/analyze.html?d=get.docker.co....
- tln 7y agoFWIW docker doesn't publicize those instructions, they give: curl -fsSL https://get.docker.com -o get-docker.sh sh get-docker.sh And, it's the only one of the examples listed in the article that doesn't pipe to shell.