Skip to content
This repository has been archived by the owner on Jun 24, 2021. It is now read-only.

TiDB binary checksum is not verified? #1089

Open
sticnarf opened this issue Jan 2, 2020 · 0 comments
Open

TiDB binary checksum is not verified? #1089

sticnarf opened this issue Jan 2, 2020 · 0 comments

Comments

@sticnarf
Copy link
Contributor

sticnarf commented Jan 2, 2020

I notice the url used to download TiDB binary is HTTP instead of HTTPS. And it seems to me that the checksum is not verified. There is a risk of being hijacked.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant