I think this is right. We routinely check the integrity of the packages and installers that we download using cryptographic hashing. OpenBSD even has a dedicate

I think this is right. We routinely check the integrity of the packages and installers that we download using cryptographic hashing. OpenBSD even has a dedicated tool for this purpose.[1] It would make sense to take the same approach with curled shell scripts. [1] http://www.openbsd.cl/papers/bsdcan-signify.html http://www.openbsd.cl/papers/bsdcan-signify.html