Download Script SSL
Open
security
- Dominant language
- Go
- Stars
- 31
- Forks
- 42
- PR merge metrics
- No merged PRs in 30d
Description
The download script listed in the docs (http://deis.io/deis-cli/install-v2.sh) is currently being served over a non-ssl connection allowing a MITM attack to replace the script and fetch a rogue client binary. That'd be all sorts of bad...
Contributor guide
Assessment
This issue has not been assessed yet.