3 ms·
apt-get doesn't run unsigned, unvetted shell scripts downloaded over unprotected channels.
by colanderman 13y ago
apt-get doesn't run unsigned, unvetted shell scripts downloaded over unprotected channels.
- gelnior 13y agoAbout the signing part, we definitely have to improve that. Thank you for mentioning. About the channel, the (real) install script is based on Fabric and use SSH. So you can refer directly to this: http://cozy.io/host/install.html http://cozy.io/host/install.html
- afreak 13y agoYou also should be using HTTPS for these sort of situations. Not that what you are suggesting is good in the first place.