Re:Downloading Software Safely Is Nearly Impossible
by chrisdotcode on Monday March 03, 2014 @01:58PM
(#7335615)
Is there actually a legitimate reason that the MIT PGP server doesn't have HTTPS?
[ Parent
| on HN ]
Re:Downloading Software Safely Is Nearly Impossible
by acct on Monday March 03, 2014 @03:06PM
(#7336091)
MIT GPG keys are unverified. HTTPS would only add a false sense of security - you are supposed to verify the keys after you download them (yes, it's not easy, depending on how much verification you require).