News for hackers. Stuff that matters.

A comment on Preparing Windows Server Technical Preview for Windows Containers. Parent comment

Re:Preparing Windows Server Technical Preview for Windows Co... by lmz on Wednesday August 19, 2015 @06:33PM (#10089018)
Linux packages are signed and commonly served over HTTP by various mirrors. How is this any different?
[ Parent | on HN ]
Re:Preparing Windows Server Technical Preview for Windows Co... by mehrdada on Wednesday August 19, 2015 @06:38PM (#10089030)
Ideally, you'd want them to use HTTPS to deliver the packages as well. However, I cut free software distribution some slack, because of massive distributed mirroring and delivery by a number of third parties. For Microsoft, it would be easy: why _not_ use HTTPS and get another line of defense?

(update: revelation's comment is insightful; just saw it. I forgot about versioning.)

[ Parent | on HN ]
Re:Preparing Windows Server Technical Preview for Windows Co... by revelation on Wednesday August 19, 2015 @06:38PM (#10089027)
They are versioned, of course. You will have to explicitly agree to a downgrade.
[ Parent | on HN ]