[vlc-devel] Future of the update mechanism
fcvlcdev at free.fr
Thu Jul 30 18:48:23 CEST 2009
Le jeudi 30 juillet 2009, Rémi Duraffort a écrit :
> updates, but you have to keep in mind that you really can't trust the
> informations given by the dns (like the file to download). So using the
> dns record to know if there is an update or not and then check directly
> on the videolan server seems ok.
Sorry, but if you can't trust the DNS for the data in records, you can't trust
the videolan server, except it it return signed updates.
So if updates are signed we won't have to care if the channel is secure or
not. The lowest costs method will be the best.
More information about the vlc-devel