Re:Goodbye Mac App Store
by nicky0 on Saturday March 11, 2017 @01:47PM
(#13846571)
For updates, you can use the latest Sparkle implementation, or something like it. It works with Sandboxed apps.
[ Parent
| on HN ]
Re:Goodbye Mac App Store
by jakobegger on Saturday March 11, 2017 @03:58PM
(#13847220)
It doesn't yet. From the website: "Support for sandboxing is currently under development."
Allowing automatic software updates requires leaving a big fat hole in your Sandbox...
(And what's the point of restricting your app to a sandbox, when it can replace itself with a non-sandboxed app?)
There is a working branch which fully supports Sandboxing with a secure approach: https://github.com/zorgiepoo/Sparkle
This is set to be Sparkle 2.0.
You raise an interesting point about security. It's about what you trust. Do you trust the app, or do you trust the developer of the app and their update infrastructure too. To have auto updates you need to do the latter.