On: ITerm2 2.0

[IgorPartola]

So did everyone here just download this piece of software over HTTP (no HTTPS)? Why is it that large projects like this cannot spend 15 minutes setting up hosting over HTTPS-only using a $10 (or even free) SSL cert? I love me some iTerm but yikers.

[gnachman → IgorPartola]

I've been putting this off for too long. Waiting to get the cert signed now...

[IgorPartola → gnachman]

Thank you! That's awesome. I'll put it on my TODO to send you $10 in the next week or so for the cost of the cert.

[tlrobinson → IgorPartola]

FYI if you use homebrew-cask to install iTerm2 it will at least check a SHA-256 hash of the zip. Looks like the "formula" has been updated for 2.0:

    sha256 '6a59e1b96d9037b6ff1b8aaaf7aed5cff572d74d6e58390db16028433769c058'
    url 'http://www.iterm2.com/downloads/stable/iTerm2_v2_0.zip'

Unfortunately the in-app update mechanism also uses HTTP, and I don't know if they check a signature or anything.

[axman6 → IgorPartola]

"Large projects"? I don't think iTerm counts as a large project

[Cthulhu_ → axman6]

It's got tens of thousands of users (random guess, I'm sure the author has accurate stats); I'd call that pretty large.