1 repositorio
Mechanisms for validating the cryptographic signatures of software release feeds to ensure authenticity and prevent redirection attacks.
Distinct from Software Update Feeds: The candidates focus on feed generation or data retrieval; this feature is specifically about security verification and cryptographic trust of the update channel.
Explore 1 awesome GitHub repository matching security & cryptography · Update Feed Verifications. Refine with filters or upvote what's useful.
Sparkle is a software update framework for macOS applications. It provides a system for delivering automatic updates using signed archives and RSS-based feeds to notify clients of new software versions. The framework ensures software integrity and authenticity through public-key cryptography, requiring digital signatures for both update archives and release feeds. It includes mechanisms for signing key rotation to maintain the security chain if a private key is lost. To optimize delivery, the project includes tools for generating binary delta updates that ship only the byte-level differences
Sparkle validates digital signatures on release notes and update feeds to prevent redirection to malicious servers.