Reword curl | sh disclaimer in TRPL §2.1

The paragraph here seemed confusing, so I reworded it.  Also added
another possible reason why `curl | sh` might be objectionable to users.
This commit is contained in:
Keshav Kini 2015-10-19 12:05:52 -05:00
parent 3e268f2fba
commit d142a4eed0

View File

@ -51,11 +51,15 @@ us an uninstall option.
## That disclaimer we promised
Some people, and somewhat rightfully so, get very upset when we tell them to
`curl | sh`. Basically, when they do this, they are trusting that the good
people who maintain Rust aren't going to hack their computer and do bad things.
That's a good instinct! If you're one of those people, please check out the
documentation on [building Rust from Source][from-source], or [the official
binary downloads][install-page].
`curl | sh`. Their concern is that `curl | sh` implicitly requires you to trust
that the good people who maintain Rust aren't going to hack your computer and
do bad things -- and even having accepted that, there is still the possibility
that the Rust website has been hacked and the `rustup` script compromised.
Being wary of such possibilities is a good instinct! If you're uncomfortable
using `curl | sh` for reasons like these, please check out the documentation on
[building Rust from Source][from-source], or
[the official binary downloads][install-page].
[from-source]: https://github.com/rust-lang/rust#building-from-source