Skip to content
This repository has been archived by the owner on May 15, 2020. It is now read-only.

Install script should be served via https #529

Open
mraerino opened this issue May 6, 2016 · 1 comment
Open

Install script should be served via https #529

mraerino opened this issue May 6, 2016 · 1 comment

Comments

@mraerino
Copy link

mraerino commented May 6, 2016

It is an anti-pattern to use curl $http_url | sh

Attacks through that are very easy.

Please enable https on get.pow.cx!

@mraerino
Copy link
Author

mraerino commented May 6, 2016

Temporary fix:

curl -L https://github.com/basecamp/pow/raw/master/install.sh | sh

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant