5 ms·
How do you get the public key? I've heard the ssl certificate system that ships with browsers is broken, too. Maybe it would be an improvement to create a smal
by facepalm 12y ago
How do you get the public key? I've heard the ssl certificate system that ships with browsers is broken, too.
Maybe it would be an improvement to create a small command line tool that ensures https connections and asks for a hash before running a script?
- sarciszewski 12y agoKey management is out of scope for this discussion. Ideally, it's shipped with your OS. If your OS is insecure, you're already vulnerable.
- facepalm 12y agoSo you are a fan of the solution that you have to pay the OS provider a fee so that they certify your app? Sure, that's a possibility, but hardly conductive to the open web.
- sarciszewski 12y agoNope. Don't try to put words in my mouth, please. apt-get install php-composer is much better than curl https://getcomposer.org/installer https://getcomposer.org/installer | php
- facepalm 12y agoHow do you get your app into the repository? Maybe for Linux you don't need to pay, but you still need to gain approval of the maintainers. Might be even more costly than simply paying up (as for Apple or Microsoft).
- sarciszewski 12y agoOr you can set up a PPA. :/
- facepalm 12y agoBut then you are back to square one - how do you establish the trustworthiness of the PPA?
- sarciszewski 12y agoTOFU. Done.