Quote Originally Posted by probono
Hi tmp000,

thanks for your input which we appreciate.

Quote Originally Posted by tmp000
this system makes it probably as easy for Linux newbies to get a trojan as it is already for Windows noobs
It doesn't, exactly for the reason that we do not use MIME Types. If we were using MIME Types, then anyone could set up a server to send the neccessary MIME headers, and in turn anyone's recipes would be run by the klik client. But since we are not using MIME Types, the klik client does not run anything except recipes from the official klik server. Please note that klik URLs do not contain a hostname, so they are not only easier to remember, but also it's impossible to trick the user with modified klik links. In fact, it's just a matter of trusting the klik server or of not doing so (as with any server you are downloading from).

In summary, "it's not a bug, it's a feature"

Greetings,
probono
Very well thought out, the only thing that could screw this up is users downloading a "unoffical" version.