4 ms·

So, let's fix that.

• groby_b 13y ago
  While that's a nice sentiment, it indicates a rather complete lack of understanding of security issues by chocolatey in the first place. Sure, they can move that particular download to https, but it doesn't install any confidence that they've thought through the rest of their flow. As far as I can tell, packages don't even need to be signed. As a result, I'd not be able to trust anything they do.
  • bphogan 13y ago
    Which goes back to my original statement. If more people used it and knew about it, maybe more people could get involved. This stuff is hard. And presumably we're doing this programming stuff because we're not afraid of hard problems. One problem at a time - end users can't find the right links to download, so this solves that. Now open some issues about the security stuff and let's get that patched up. Telling people to not use Windows, or that "X is flawed so rather than fix it I'll avoid it" isn't moving anything anywhere. I'd rather get involved.
  • deleted 13y ago
    [deleted]