User: Password:
Subscribe / Log in / New account

Trust and mirrors

Trust and mirrors

Posted Jul 17, 2008 8:44 UTC (Thu) by ttonino (guest, #4073)
In reply to: Trust and mirrors by IkeTo
Parent article: Trust and mirrors

Yup. Just check the SHA1 of the metadata to a version at a trusted location.

Or figure out an incremental metadata format (append changes and append new signature), which
would make it possible to push an update out every day or even every hour. The client would
then refuse metadata with a time stamp that is too old. The possibility of incremental updates
makes these 'time stamp updates' cheap in bandwidth.

(Log in to post comments)

Copyright © 2018, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds