Re:RainLoop Webmail: Simple, modern and fast web-based email...
by crdoconnor on Wednesday June 25, 2014 @02:01AM
(#7942481)
I prefer to see these scripts on github, over https, with a commit hash specified. That's harder to hack.
It seems like no matter how you install the software, you likely have to put at least that level of trust in them. Unless you run it in its own VM or other sandbox, of course.
The TLS point is totally valid, though.