logoalt Hacker News

marcrosoft • last Thursday at 1:32 AM • 2 replies • view on HN

Last time I checked quicklisp also didn’t support https and doesn’t do any signature checking.

Replies

lioeters • last Thursday at 11:18 AM

Quicklisp still doesn't support HTTPS, which is apparently also necessary to do signature check.

Use HTTPS instead of HTTP - https://github.com/quicklisp/quicklisp-client/issues/167

tmtvl • last Thursday at 10:45 AM

Indeed, while you can use ql-https for, well, HTTPS, it's not the easiest thing to install (especially if you want to put everything somewhere else than ~/common-lisp/) and adding other distributions (like, say, Ultralisp) is a bit finicky.