2 ms·
Signing by several developers is a good idea. Also, the scheme might still fall to man-in-the-middle attack. One possible solution could be to have multiple upd
by khandekars 17y ago
Signing by several developers is a good idea. Also, the scheme might still fall to man-in-the-middle attack. One possible solution could be to have multiple update servers with the policy that, download update from one and signatures from the other, subsequently verifying the integrity.
- eru 17y agoThe man-in-the-middle attack is not such a big problem in defending against a short-lived attack. Ubuntu establishes the identity with the keys that you get at installation.