Re: [rust-dev] Accessing Rustup.sh Securely

2014-08-03 Thread Erick Tryzelaar
Thanks for this. If anyone wants to track our progress securing rust-lang.org, you can follow this issue: https://github.com/rust-lang/rust/issues/16123 On Sun, Aug 3, 2014 at 12:04 PM, Bryce Fisher-Fleig br...@fisher-fleig.org wrote: Dear RustLangers, TL;DR:: Only access rustup.sh at

Re: [rust-dev] Accessing Rustup.sh Securely

2014-08-03 Thread Bryce Fisher-Fleig
Thanks for pointing me to this issue!! I opened a similar issue on rust-www and got no responses for days. I've actually setup SSL + CloudFront for my own blog and I have some experience with this. On Sun, Aug 3, 2014 at 12:07 PM, Erick Tryzelaar erick.tryzel...@gmail.com wrote: Thanks for

Re: [rust-dev] Accessing Rustup.sh Securely

2014-08-03 Thread Bryce Fisher-Fleig
Pardon my slowness -- I'm having trouble figuring out where the repo for doc.rust-lang.org is located so I can make a PR. Can someone point me in the right direction? ___ Rust-dev mailing list Rust-dev@mozilla.org

Re: [rust-dev] Accessing Rustup.sh Securely

2014-08-03 Thread Evan G
The rust documentation is generated from the rust repo and source code. On Sun, Aug 3, 2014 at 2:52 PM, Bryce Fisher-Fleig br...@fisher-fleig.org wrote: Pardon my slowness -- I'm having trouble figuring out where the repo for doc.rust-lang.org is located so I can make a PR. Can someone point

Re: [rust-dev] Accessing Rustup.sh Securely

2014-08-03 Thread Diggory Hardy
Which is why I don't use it. A third point is that root access is really not required; e.g. I usually install software into /home/install/NAME and then do no more than create links to the binaries from my own bin folder. Of course, that doesn't remove the need to validate the downloaded files.