You're right. It very well could be a MITM attack. But I guess you could see the source code for yourself after you've downloaded it right? Anyhow, I agree tha

You're right. It very well could be a MITM attack. But I guess you could see the source code for yourself after you've downloaded it right? Anyhow, I agree that using --no-check-certificate is usually a bad idea.