Re: Semi-automatic update option?
"Greg Thomas" <[email protected]> Sat, 15 Sep 2007 18:10:05 +0100
| Newsgroups | gmane.comp.security.passwordsafe.devel |
|---|---|
| Message-ID | <[email protected]> |
> Users have been asking for an automatic update mechanism for PasswordSafe, so I've begun thinking on how to implement it: ... > - The update button will open a hardcoded URL, something like "https://passwordsafe.sf.net/latest.txt" This will have the version information for the latest & greatest, and a URL for downloading it. a) I'd be happy with an option (disabled by default) to automatically check for updates once a week. b) It may be worth adding a signature file located on a completely independent server somewhere. That way, an attacker has to compromise two completely different servers (one hosting the compromised 'upgrade', one hosting the signature for it) before they can infect people A couple of thoughts, anyway, Greg ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/