On Tue, 2007-07-10 at 10:54 -0400, Ivan Krstić wrote: > Alex, > > On Jul 10, 2007, at 10:21 AM, Alexander Larsson wrote: > > I've been doing some more work on updatinator. > > I'm happy to see this work continuing, but I want to set clear > expectations for FRS. I will not give security signoff for the FRS > update system, in my mind one of the most critical subsystems on the > machine, to be based on new code.
I though the whole security system was new code. And anyway, you can verify every bit of the downloaded data once updatinator has sucked it down using the sha1 hashes, there is no need to trust the downloader. I'm happy your work on security is continuing, but I'm not gonna let it block my work. _______________________________________________ Devel mailing list [email protected] http://lists.laptop.org/listinfo/devel
