Hacker News new | ask | show | jobs
by adidalal 3752 days ago
In this case, yes, as it verifies the download against a (best-effort) known-good checksum. It's not a perfect system, but did work out in this case.

GPG verification where available and refusing to install Casks without a checksum is also in the pipeline.

(I'm one of the maintainers of Homebrew Cask)