4 ms·

I'd like to see a transparent ledger for software releases, to make targeted malicious update attacks detectable. Similarly, pinning the hash of the index reso

I'd like to see a transparent ledger for software releases, to make targeted malicious update attacks detectable. Similarly, pinning the hash of the index resource for a web site using a transparent ledger could let web apps be as secure as native apps with auto update.

Boulth 8y ago
Have you seen this: https://wiki.mozilla.org/Security/Binary_Transparency https://wiki.mozilla.org/Security/Binary_Transparency?