[kaoD]

You need a secure channel like HTTPS to get that hash, in which case, does it really matter if you just run the script anyways?