3 ms·
The big issue is that HTTP increases greatly the attack surface of VLC. The VLC client needs to parse the response from the "update server", and this response m
by aritmo 8y ago
The big issue is that HTTP increases greatly the attack surface of VLC.
The VLC client needs to parse the response from the "update server", and this response must be considered as potentially 100% malicious.
- jbk 8y agoOf course not. The response is GPG-signed.