[ultimoo]

The first URL isn't https. A rogue router anywhere from your building or your ISP to the server's building could potentially tamper with a plain text http response, which would then be evaluated by your shell.

[tuananh]

well i was talking about homebrew. it uses https.

    ruby -e "$(curl -fsSL https://raw.github.com/mxcl/homebrew/go)"