3 ms·
If an installation script is downloading an arbitrary binary then I’m not running that script unless that binary also comes from a trusted source. We have PKI
by mulmen 4y ago
If an installation script is downloading an arbitrary binary then I’m not running that script unless that binary also comes from a trusted source. We have PKI to prove that sites are who they claim to be. I only run binaries from trusted sources.
- tasuki 4y agoBut then if you trust that source and its binaries, why would you inspect their scripts? What extra protection does that give you? None, imo.