5 ms·
I'm just getting started with Electron, so forgive me if this is a stupid question, but how is that different from the updates endpoint getting compromised (for
by napoleond 10y ago
I'm just getting started with Electron, so forgive me if this is a stupid question, but how is that different from the updates endpoint getting compromised (for apps with auto update enabled)?
- felixrieseberg 10y agoThat's an excellent question! The auto updater requires your packages to be code-signed, meaning that someone would have to compromise the endpoint _and_ also be able to sign code with your root-trusted certificate.
- napoleond 10y agoOh neat! That makes sense, but I didn't realize it was set up for code signing. Good to know :)
- esonderegger 10y agoThe auto-updater really isn't ready for prime time, sadly. I'd suggest waiting until https://github.com/electron/electron/issues/8106 https://github.com/electron/electron/issues/8106 is resolved before using it in your project.