3 ms·
By comparing the fingerprint to a trusted source, which the snippet above doesn't do. And if you trust that the https source will lead you to the correct github
by masklinn 4y ago
By comparing the fingerprint to a trusted source, which the snippet above doesn't do. And if you trust that the https source will lead you to the correct github, you can trivially check the fingerprint against what github publishes.
- cprecioso 4y agoYou’d be pressed to find someone who doesn’t trust the https source. So… you’d do manually what the snippet does?