From 550d9a953cb6231bd2cebe1dbbb5a71eaae2f06d Mon Sep 17 00:00:00 2001 From: Norbert Preining Date: Tue, 12 Apr 2016 06:13:00 +0000 Subject: add a TODO git-svn-id: svn://tug.org/texlive/trunk@40458 c570f23f-e606-0410-a88d-b1316a301751 --- Master/tlpkg/doc/tl-security-proposal.txt | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'Master') diff --git a/Master/tlpkg/doc/tl-security-proposal.txt b/Master/tlpkg/doc/tl-security-proposal.txt index 57cefd1215e..6d88d577bd0 100644 --- a/Master/tlpkg/doc/tl-security-proposal.txt +++ b/Master/tlpkg/doc/tl-security-proposal.txt @@ -3,6 +3,7 @@ Security Proposal for TeX Live (last change NP 2016-03-19) Changelog: +* 20160409 * 20160319 key management, rewrite * 20160307 @@ -33,6 +34,11 @@ TODO texlive.keys should be treated with special priority and updated before anything else (?) +* TODO + if downloaded texlive.tlpdb checksum agrees with remote + checksum, then we do NOT verify signature by now + This needs to be changed! + Definitions: * checksum: defined via tl_checksum, currently is sha512 -- cgit v1.2.3