4 ms·
The problem with that is that, if you as a malicious third person can MITM the http connection for updates, you can push an older signed package with known vuln
by breakingcups 10y ago
The problem with that is that, if you as a malicious third person can MITM the http connection for updates, you can push an older signed package with known vulnerabilities.