Chris Siebenmann
And PGP key checking doesn't save you because the verification PGP key ID to import is given on the same page, in MITM'able plaintext.
Today's security sadface: http://pkgsrc.joyent.com/install-on-illumos/ … is not available over https, so all those checksums/etc could be MITMd. #SmartOS #Illumos
-
-
-
@jschauma@thatcks took longer than expected (as these things usually do) but this is now in place: https://pkgsrc.joyent.com/ - View other replies
-
-
Jan Schaumann
Jonathan Perkin
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.