4 ms·
What if an exploit is found in the signed copy? Someone else can host the old version which is still signed and supply it to the user. Are they going to revoke
by mehrdada 11y ago
What if an exploit is found in the signed copy? Someone else can host the old version which is still signed and supply it to the user. Are they going to revoke the certificate used to sign it entirely?! Not using HTTPS is a sloppy security practice on their side.
- lmz 11y agoLinux packages are signed and commonly served over HTTP by various mirrors. How is this any different?
- revelation 11y agoThey are versioned, of course. You will have to explicitly agree to a downgrade.
- mehrdada 11y agoIdeally, you'd want them to use HTTPS to deliver the packages as well. However, I cut free software distribution some slack, because of massive distributed mirroring and delivery by a number of third parties. For Microsoft, it would be easy: why _not_ use HTTPS and get another line of defense? (update: revelation's comment is insightful; just saw it. I forgot about versioning.)