[kentonv]

> Also, even if it's [on] TLS/SSL, you're putting a lot of trust in Rainloop not being hacked or malicious.

It seems like no matter how you install the software, you likely have to put at least that level of trust in them. Unless you run it in its own VM or other sandbox, of course.

The TLS point is totally valid, though.

[crdoconnor]

I prefer to see these scripts on github, over https, with a commit hash specified. That's harder to hack.