4 ms·
Actually, the OpenBSD people came up with "signify" which handles this more elegantly. FTP is still advertised for download of this OS, but any tampering or ot
by chasil 3y ago
Actually, the OpenBSD people came up with "signify" which handles this more elegantly.
FTP is still advertised for download of this OS, but any tampering or otherwise corrupted files will not pass a signature test when signify is invoked.
The keys are rotated for every release, the next expected key is always included in the current OpenBSD release.
This system would be safe to fetch sensitive content over cleartext http.
EDIT: Here is a paper on signify:
https://www.openbsd.org/papers/bsdcan-signify.html https://www.openbsd.org/papers/bsdcan-signify.html
- NohatCoder 3y agoNeat, but only really relevant for rolling updates. This feature is a one-shot installer.
- ilyt 3y agoDebian does that since forever. Release file also contains Date: Wed, 31 May 2023 14:13:10 UTC Valid-Until: Wed, 07 Jun 2023 14:13:10 UTC which allows spotting any tries of "downgrading" repository to previous version with potentially insecure packages Of course, you still have to get current time somehow but I guess once RTC is set the device can assume the changes in time won't be huge and just use any kind of https source for that.