A system for signed installers to replace curl | sh

Author here, just noticed this submission. Happy to answer any questions. (You may also be interested in the discussions on Proggit[0] and /r/golang[1].)

[0] https://www.reddit.com/r/programming/comments/426zsv/pipethi...

[1] https://www.reddit.com/r/golang/comments/4261he/pipethis_sto...

This seems to make downloading scripts safer when encryption isn't supported by the server. Is that true, or am I way off base?

(For those reading who are incredulous that a reasonable person would ask you to download an installation script over unencrypted HTTP, you are right to be incredulous. Even some large-ish companies do it. It's insane.)