Y
Hacker News
new
|
ask
|
show
|
jobs
by
Firehed
5035 days ago
If it can't validate the cert, it could be the sign of a MITM attack. Likely? No, but I wouldn't take content with cert issues and run it as root. At least not without validating it in some other way.
1 comments
hardik988
5034 days ago
You're right. It very well could be a MITM attack. But I guess you could see the source code for yourself after you've downloaded it right?
Anyhow, I agree that using --no-check-certificate is usually a bad idea.
link
Anyhow, I agree that using --no-check-certificate is usually a bad idea.