Re: [Tails-dev] Regarding certificate pinning in verificatio…

Borrar esta mensaxe

Responder a esta mensaxe
Autor: intrigeri
Data:  
Para: The Tails public development discussion list, Uzair Farooq
Asunto: Re: [Tails-dev] Regarding certificate pinning in verification extension
Hi,

sajolida:
> But the certificate pinning done by the extension precisely tries to
> prevent such an attack, but only on the download of the ISO Description
> File [2].


It's unclear to me why DAVE v2 will need the ISO Description File since
it won't download the ISO itself anymore (if I got it right). What did
I miss?

Cheers,
--
intrigeri