[vlc-devel] Future of the update mechanism

[Francois Cartegnie]

Le jeudi 30 juillet 2009, Rémi Duraffort a écrit :
> updates, but you have to keep in mind that you really can't trust the
> informations given by the dns (like the file to download). So using the
> dns record to know if there is an update or not and then check directly
> on the videolan server seems ok.

Sorry, but if you can't trust the DNS for the data in records, you can't trust 
the videolan server, except it it return signed updates.
So if updates are signed we won't have to care if the channel is secure or 
not. The lowest costs method will be the best.

Francois.