4 ms·
The "Date, Valid-Until" timestamp mitigates replay-attack, cool. But what if a vulnerability is discovered in a package and an MITM attack prevent you from down
by TedLePoireau 8y ago
The "Date, Valid-Until" timestamp mitigates replay-attack, cool.
But what if a vulnerability is discovered in a package and an MITM attack prevent you from downloading the new patched version, making you believe your system is up to date although it's not ?
- AstralStorm 8y agoNo, apt then shows a message about failing to download fresh update lists. For security repo, the period it's 10 days.