New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Guide: use https for installing Rust #16504

Closed
vks opened this Issue Aug 14, 2014 · 3 comments

Comments

Projects
None yet
3 participants
@vks
Contributor

vks commented Aug 14, 2014

Now that #16123 has been implemented, the guide can be updated to use

$ curl -s https://static.rust-lang.org/rustup.sh | sudo sh

instead of

$ curl -s http://www.rust-lang.org/rustup.sh | sudo sh

This provides more security, although man-in-the-middle attacks are still possible as long as the guide is served over http. To be able to fix this, Github needs to implement https for user pages first: isaacs/github#156

@steveklabnik

This comment has been minimized.

Show comment
Hide comment
@steveklabnik

steveklabnik Aug 14, 2014

Member

Sure. I'd love a PR that took care of this.

Member

steveklabnik commented Aug 14, 2014

Sure. I'd love a PR that took care of this.

@vks

This comment has been minimized.

Show comment
Hide comment
@vks

vks Aug 14, 2014

Contributor

I just realized that this is already fixed upstream, but the website is apparently not yet updated.
I'll close the issue once the change is online.

Contributor

vks commented Aug 14, 2014

I just realized that this is already fixed upstream, but the website is apparently not yet updated.
I'll close the issue once the change is online.

mistydemeo added a commit to Homebrew/legacy-homebrew that referenced this issue Aug 15, 2014

Rust: Adds https
Rust has adopted SSL for their download links, so Homebrew can make the switch over now. See [this](rust-lang/rust#16504) Rust Issue for further information.

Closes #31607.

Signed-off-by: Misty De Meo <mistydemeo@gmail.com>
@thestinger

This comment has been minimized.

Show comment
Hide comment
@thestinger
Contributor

thestinger commented Aug 19, 2014

@thestinger thestinger closed this Aug 19, 2014

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment