updatinator benchmarking (Was: rsync benchmarking)

Alexander Larsson alexl at redhat.com
Tue Jul 10 11:15:56 EDT 2007


On Tue, 2007-07-10 at 10:54 -0400, Ivan Krstić wrote:
> Alex,
> 
> On Jul 10, 2007, at 10:21 AM, Alexander Larsson wrote:
> > I've been doing some more work on updatinator.
> 
> I'm happy to see this work continuing, but I want to set clear  
> expectations for FRS. I will not give security signoff for the FRS  
> update system, in my mind one of the most critical subsystems on the  
> machine, to be based on new code.

I though the whole security system was new code. And anyway, you can
verify every bit of the downloaded data once updatinator has sucked it
down using the sha1 hashes, there is no need to trust the downloader. 

I'm happy your work on security is continuing, but I'm not gonna let it
block my work.





More information about the Devel mailing list