Re: Widget Requirements: Updates vs security

2008-08-07 Thread Marcos Caceres
Hi Thomas, On Thu, Aug 7, 2008 at 10:43 AM, Thomas Roessler <[EMAIL PROTECTED]> wrote: > > While I'm on it... I believe that we should add the following > points to the automatic update requirement: > > - Conforming specifications should ensure that updates are > authenticated. > > - Conform

Widget Requirements: Updates vs security

2008-08-06 Thread Thomas Roessler
While I'm on it... I believe that we should add the following points to the automatic update requirement: - Conforming specifications should ensure that updates are authenticated. - Conforming specifications should provide a mechanism to protect against downgrade attacks using ancien