3 ms·

a MITM can trick your server into thinking there are no updates, and no error will be raised

• skj 8y ago
  That, and an attacker could do a replay attack, and potentially send you to an earlier (vulnerable) version.