I didn't expect that I'll have to explain how does internet work, but ok. When you ask curl to download "git.io/getnami", first thing it does is to ask DNS ser

I didn't expect that I'll have to explain how does internet work, but ok. When you ask curl to download "git.io/getnami", first thing it does is to ask DNS server: "Hey, what IP does git.io refer to?" And DNS server will send you the IP address. MitM attack can happen at this point, and you will get fraudulent IP address. Usually you will get correct one. Then you connect to the IP address. MitM attack can happen here as well, you think you connected to server with the IP, but some node along the way is actually lying to you and you are in fact connecting somewhere else. At this point when using https, webserver to which you connected would prove to you that it is indeed "git.io" and your communication would become encrypted. Only after that would the webserver 301 redirected you somewhere else. But because you chose to not use https, user might have connected somewhere else and could have downloaded completely different, malicious file. Next time you accuse other people of being ignorant and rude, make sure it's not you who is in the wrong.