3 ms·
No, it's not. The updater needs to know the correct signatures and it doesn't have a trusted way of retrieving them. Also, any previous update may have been mal
by Xylakant 13y ago
No, it's not. The updater needs to know the correct signatures and it doesn't have a trusted way of retrieving them. Also, any previous update may have been malicious and replaced the updater. The updater may very well have embedded keys, but we don't know, so the secure option would be not to trust it.
- QSIITurbo 13y agoThat's not how signing works. Also, if the signing is indeed implemented correctly, then the updater cannot have been compromised earlier.
- lucian1900 13y agoThe updater verifies the signature using the public counterpart to Apple's current private key. It can only be changed by updating the updater (or a separate keys-only package), with the correct signature. Or at least that's how it's supposed to work.