diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2023-05-02 14:50:36 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2023-05-02 15:06:25 -0400 |
| commit | 41075cfe7fc41dd504664a25d96dc2d4c3d04891 (patch) | |
| tree | 5c71015f289291a16b5561cea8994877687caae6 | |
| parent | 15c98e1bec91153f58222468f05cfe54faf1ff8c (diff) | |
add conservative key pinning for System Updater
| -rw-r--r-- | static/releases.html | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html index 6619ab93..9ffa2672 100644 --- a/static/releases.html +++ b/static/releases.html @@ -599,6 +599,7 @@ <ul> <li>kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro: Mali GPU driver update</li> + <li>System Updater: add TLS key pinning with expiration 2 months in the future to make TLS more useful as an additional layer of security before the 3 layers of offline update signing (update package signature, update_engine payload signature and verified boot signature) while also avoiding blocking updates on extremely out-of-date installs falling behind changes to our TLS certificate approach</li> </ul> </article> --> |