Install script should be served via https

basecamp / pow

Zero-configuration Rack server for Mac OS X

http://pow.cx/

MIT License

3.41k stars 259 forks source link

Open mraerino opened 8 years ago

mraerino commented 8 years ago

It is an anti-pattern to use curl $http_url | sh

Attacks through that are very easy.

Please enable https on get.pow.cx!

mraerino commented 8 years ago

Temporary fix:

curl -L https://github.com/basecamp/pow/raw/master/install.sh | sh