[hardik988]

You're right. It very well could be a MITM attack. But I guess you could see the source code for yourself after you've downloaded it right?

Anyhow, I agree that using --no-check-certificate is usually a bad idea.