Hacker News new | ask | show | jobs
by TZubiri 480 days ago
But you can .. get the hash yourself?

wget url; sha256 file

2 comments

Of course you can. But when it comes to security, one thing is very important in practice: making the secure way of doing things as easy as possible.

So, why did you not actually post the correct shell script? Apparently that would have been more effort to get right and ensure is correct right? And also work for every OS. And there you have it: if someone first has to figure out which script to run, some percentage will give up here. And that's my point: the browser should make it as easy as possible to avoid that from happening.

Cool. Now your site will break if the upstream pushes a fix while you're on vacation.