Bug#499897: preventing replay attacks against the security archive
On Thu, September 25, 2008 23:31, Peter Palfrader wrote:
> On Thu, 25 Sep 2008, Thijs Kinkhorst wrote:
>
>
>> - have it expire in a period long enough so a new point release will
>> have happened in the meantime, say half a year.
>
> Probably still not acceptable for CD-Roms.
I don't think that should be a problem - I don't believe CD-Roms are the
target of this feature. APT already handles CD-Roms differently so it
could exclude them from this check.
Thijs
Reply to: