On 28/03/14 12:05 AM, György Andrasek wrote: >> curl -s http://www.rust-lang.org/rustup.sh | sudo sh > > Can we please not recommend people pipe random text from across the > internet into a fricking *root shell*?
The snapshot binaries aren't signed, and they're downloaded via http. Only the releases themselves are signed at this point. These are known issues and clearly should be fixed, but at the moment rust-lang.org doesn't have https set up.
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Rust-dev mailing list Rust-dev@mozilla.org https://mail.mozilla.org/listinfo/rust-dev
