Re: [Tails-dev] Regarding certificate pinning in verificatio…

Supprimer ce message

Répondre à ce message
Auteur: intrigeri
Date:  
À: The Tails public development discussion list, Uzair Farooq
Sujet: Re: [Tails-dev] Regarding certificate pinning in verification extension
Hi,

sajolida:
> But the certificate pinning done by the extension precisely tries to
> prevent such an attack, but only on the download of the ISO Description
> File [2].


It's unclear to me why DAVE v2 will need the ISO Description File since
it won't download the ISO itself anymore (if I got it right). What did
I miss?

Cheers,
--
intrigeri