Hacker News new | ask | show | jobs
by nequo 754 days ago
I think this is right. We routinely check the integrity of the packages and installers that we download using cryptographic hashing. OpenBSD even has a dedicated tool for this purpose.[1] It would make sense to take the same approach with curled shell scripts.

[1] http://www.openbsd.cl/papers/bsdcan-signify.html