Re:Rust's 2019 Roadmap
by steveklabnik on Tuesday April 23, 2019 @02:51PM
(#19731623)
So, to be clear, the linked thread is about rustup. If you don't install rust via rustup, then the above issue will never happen to you. By default, it's checking that you have an SSL connection, yes.
You can fully build and develop Rust projects offline; this is a hard requirement of things like Debian and Firefox, for example.
If rustup is the normal way to install rust, then that is exactly what I'd want to use. My employer would mirror the needed web sites. For example, my employer mirrors much of github and ubuntu and various Microsoft things. I just follow the normal instructions to fetch things on the internet, and it all works from the mirrored web sites.
Re:Rust's 2019 Roadmap
by steveklabnik on Tuesday April 23, 2019 @03:06PM
(#19731769)
It’s the default choice, yes. However, If you’re using Ubuntu you could also install it through apt, though you’ll get an older version.
Note how Ubuntu does things correctly, using signatures on the packages. I can copy those to any web site.
Doing things that way helps you too. Mirrors, including caches, are easy to set up.
Installing via apt will not work for Windows users.
Re:Rust's 2019 Roadmap
by steveklabnik on Tuesday April 23, 2019 @03:36PM
(#19732082)
Sure, we check signatures too. (At least, Cargo does. I think rustup may not in some circumstances? I forget) It's about defense in depth.
I am a Windows user, I know that. That's why i said "if" :)
For security, my normal software development environment is off the internet. I can mirror a web site, but https would be trouble.