News for hackers. Stuff that matters.
Re:Curl 7.51.0 Released by feld on Thursday November 03, 2016 @10:50AM (#12864378)
But you're verifying the signature of the tarball first, right?
Re:Curl 7.51.0 Released by geofft on Thursday November 03, 2016 @11:43AM (#12864914)
Almost all of the examples on that page use curl https:// | sh. Which, again, makes it a superior option to wget && gpg --verify && ./configure; I have yet to see anyone who is better at PGP fingerprint verification than their OS's SSL stack is at TLS certificate verification. (There are a very small number of people who are as good, but not better.)