It might be a silly question but I will go for it anyway…

due to some backward compatibility I only adjusted part of the calling script chain. there is a reason why I call it twice but let's leave it for now.

so does calling remote bash script via https which then call another bash script with http consider secure?

something like this:

  curl --capath /certdir/ https://mydomian.com/scripts/script1.sh | bash

script 1 look like this:

  curl http://mydomian.com:1080/scripts/script2.sh | bash

If you're in any way worried about security, use HTTPS for both.

I doubt that you would ever be attacked that way, but we never know and the way you allow the script to run automatically is quite risky. Note that all systems that access that file become vulnerable should the server get compromised.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.