Hacker News new | ask | show | jobs
by Firehed 5035 days ago
If it can't validate the cert, it could be the sign of a MITM attack. Likely? No, but I wouldn't take content with cert issues and run it as root. At least not without validating it in some other way.
1 comments

You're right. It very well could be a MITM attack. But I guess you could see the source code for yourself after you've downloaded it right?

Anyhow, I agree that using --no-check-certificate is usually a bad idea.