IIUC, there are two errors we can check for and report: network failure
and stale data. Eg, if we don't have a network failue, but we do have
stale data, then give the severe message. If you do have a network
failure/hiccup, report something less severe instead, possibly with an
option for opting out of network failure warnings.

Another option is appropriate wording that says something like "Apt has
detected stale data after performing an update of its cache. This could
be the result of a transient network failure or an indication of a man-
in-the-middle attack..." Of course, that is suboptimal if it happens
*every time* there is a network hiccup.

-- 
Package managers vulnerable to replay and endless data attacks
https://bugs.launchpad.net/bugs/247445
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to