Re: [Passwordsafe-devel] Semi-automatic update option?
Popular easy-to-use and secure password manager
Brought to you by:
ronys
From: Greg T. <Greg@TheThomasHome.co.uk> - 2007-09-15 17:10:02
|
> Users have been asking for an automatic update mechanism for PasswordSafe, so I've begun thinking on how to implement it: ... > - The update button will open a hardcoded URL, something like "https://passwordsafe.sf.net/latest.txt" This will have the version information for the latest & greatest, and a URL for downloading it. a) I'd be happy with an option (disabled by default) to automatically check for updates once a week. b) It may be worth adding a signature file located on a completely independent server somewhere. That way, an attacker has to compromise two completely different servers (one hosting the compromised 'upgrade', one hosting the signature for it) before they can infect people A couple of thoughts, anyway, Greg |