←back to thread

518 points LorenDB | 1 comments | | HN request time: 0s | source
Show context
hypeatei ◴[] No.46173879[source]
The site doesn't have HTTPS and there doesn't seem to be any mention of signatures on the downloads page. Any way to check it hasn't been MITM'd?
replies(4): >>46173917 #>>46173924 #>>46173945 #>>46174299 #
1. lysace ◴[] No.46173924[source]
Ideas to decrease risk of MITM:

Download from at least one more location (like some AWS/GCP instance) and checksum.

Download from the Internet Archive and checksum:

https://web.archive.org/web/20250000000000*/http://www.tinyc...