[GH-ISSUE #32] Change install instructions to use HTTPS #27

New issue

Closed

opened 2026-02-25 20:32:18 +03:00 by kerem · 1 comment

kerem commented

2026-02-25 20:32:18 +03:00

Owner

Originally created by @kmcallister on GitHub (May 23, 2013).
Original GitHub issue: https://github.com/asciinema/asciinema/issues/32

The install instructions provide this command:

curl -sL get.ascii.io | bash

The install script is served over HTTPS, but the redirect from get.ascii.io happens in the clear. An attacker on the network could tamper with this redirect in order to run arbitrary commands on your computer.

The install instructions should use a https:// URL. If you don't already have a certificate for get.ascii.io, you can get one for free from StartSSL.

Originally created by @kmcallister on GitHub (May 23, 2013). Original GitHub issue: https://github.com/asciinema/asciinema/issues/32 The [install instructions](http://ascii.io/docs/record) provide this command: ``` curl -sL get.ascii.io | bash ``` The install script is [served over HTTPS](https://raw.github.com/sickill/ascii.io-cli/master/bin/install), but the redirect from `get.ascii.io` happens in the clear. An attacker on the network could tamper with this redirect in order to run arbitrary commands on your computer. The install instructions should use a `https://` URL. If you don't already have a certificate for `get.ascii.io`, you can get one for free from [StartSSL](http://www.startssl.com/).