[vlc-devel] Future of the update mechanism

[Rafaël Carré]

On Thu, 30 Jul 2009 17:16:45 +0200
"Felix Paul Kühne" <fkuehne.videolan at googlemail.com> wrote:

> Regarding the SSL-dependency of Sparkle, it's a bit a 1.5 kB
> download per check we're discussing here. 

No, I understand we were discussing about additional CPU load on the
download server due to computation, not download size

> Additionally, nothing speaks against updating the update
> mechanism a few hours or days after we hit the news pages once the
> peak traffic is over.

For my own curiosity, does someone know how much users did use the
update mechanism? (download stats of update.videolan.org/status*)

> Anyway, as j-b pointed on IRC yesterday, we will need a trusted, not- 
> self-signed SSL certificate anyway. This would cost 10 € per year  
> max., something VideoLAN can cover without any problems.

Like courmisch said, using SSL moves the CPU load on the server side,
while DSA moves the CPU load on the client and doesn't need any
trust from a root authority (because the currently installed VLC is the
root authority since it contains the public key)

-- 
Rafaël Carré
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://mailman.videolan.org/pipermail/vlc-devel/attachments/20090730/54d9dd53/attachment.sig>