no https? no checksums? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

vectorsize on Sept 29, 2014 | parent | context | favorite | on: OS X Bash Update 1.0

no https? no checksums?

aroch on Sept 29, 2014 [–]

All of Apple's OS updaters are signed by Apple's internal CA and verified at install time -- that's why there's no checksum: http://idzr.org/ba4o

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact