Re: Semi-automatic update option?

"Greg Thomas" <[email protected]> Sat, 15 Sep 2007 18:10:05 +0100
Newsgroups gmane.comp.security.passwordsafe.devel
Message-ID <[email protected]>
> Users have been asking for an automatic update mechanism for PasswordSafe, so I've begun thinking on how to implement it:
...
> - The update button will open a hardcoded URL, something like "https://passwordsafe.sf.net/latest.txt" This will have the version information for the latest & greatest, and a URL for downloading it.

a) I'd be happy with an option (disabled by default) to automatically
check for updates once a week.
b) It may be worth adding a signature file located on a completely
independent server somewhere. That way, an attacker has to compromise
two completely different servers (one hosting the compromised
'upgrade', one hosting the signature for it) before they can infect
people

A couple of thoughts, anyway,

Greg

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/