2 ms·
They say: "Windows marks files you download with a metadata attribute known as “Mark of the Web” or “zone.identifier.”". Where is this metadata written and at w
by taubek 5y ago
They say: "Windows marks files you download with a metadata attribute known as “Mark of the Web” or “zone.identifier.”". Where is this metadata written and at which point?
Does adding this metadata messes up checksum or digital signature?
- valleyer 5y agoI don't know how it works on Windows, but there is equivalent metadata for Internet-downloaded files on macOS. It's stored in the filesystem extended attributes of the file (see getxattr(3)) and generally does not break digital signatures (including the macOS binary code signatures).
- Arnavion 5y ago>Where is this metadata written and at which point? NTFS alternate data stream. It's the responsibility of the software that created the file to populate such a stream. Common browsers do so for downloaded files. Something like `curl` probably doesn't (I don't have Windows to check). >Does adding this metadata messes up checksum or digital signature? ADS contents are not considered when checking the signature.