@necrophcodr IMO redirecting to https is near-worthless without HSTS, and HSTS won't be honored by stateless tools anyway.
@ch3root Indeed. Hopefully in that case they're checking hashes after the download anyway.
-
-
@RichFelker@ch3root Sigh. I should take the https support in toybox wget and send BusyBox a copy, shouldn't I? -
-
-
@RichFelker@ch3root@tlsify I'm piping the data through a command line utility that converts HTTP into https. Don't really care which one. -
New conversation -
-
-
@RichFelker Checking of hashes and verification of signatures is not a substitute for https, they don't protect eg against endless download. -
@RichFelker Not sure how relevant it is for musl though.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.