Hacker News Reader

This is silly. Of course you can download malicious software using SSL.

It's like saying "Feel secure using SSL? Think again, a burglar can still break into your home!"

The article's point about signed artifacts may be valid, but has nothing to do with the click-baiting, FUD headline.

Look at twitter. Everybody can't be happier because Maven Central is served over SSL now. That's good. But if you can't verify what they serve you over SSL it worth nothing. I glad you understand that. Most of the people seem not to. Once you understand that, how can you verify the content? Bintray helps with that, Maven Central makes it hard.

Reply on news.ycombinator.com