Rust's simple download script

[Brad Anderson via Digitalmars-d]

On Monday, 9 November 2015 at 23:13:03 UTC, H. S. Teoh wrote:
> On Mon, Nov 09, 2015 at 06:07:57PM -0500, Andrei Alexandrescu 
> via Digitalmars-d wrote:
>> Rust has a nice way to download at 
>> https://www.rust-lang.org/downloads.html for Posix:
>> 
>> $ curl -sSf https://static.rust-lang.org/rustup.sh | sh -s --
>> 
>> The method is simple and transparent. An optional 
>> --channel=beta or --channel=nightly parameter chooses between 
>> a stable release (default), beta, or nightly build.
>> 
>> Should we do something similar?
> [...]
>
> Probably...
>
> ... though I have to admit that the idea of running a shell 
> script downloaded from some random remote server (and that, as 
> root, as otherwise it probably wouldn't work) scares me. A lot.
>
>
> T

I found this article compelling about this subject: 
https://blog.sandstorm.io/news/2015-09-24-is-curl-bash-insecure-pgp-verified-install.html