diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2023-05-05 18:51:25 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2023-05-05 18:51:25 -0400 |
| commit | c9ae4395ab8cf9ab608cc12abf0e3884129898ca (patch) | |
| tree | e52fb2ec8241d4dfde99f0f1e4ab75509c8baaa4 | |
| parent | c0d43a0545d240cc6d4a216b3b53f175fa82db7b (diff) | |
clarify offline signing for release notes
| -rw-r--r-- | static/releases.html | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/static/releases.html b/static/releases.html index c4427243..8a34a62e 100644 --- a/static/releases.html +++ b/static/releases.html @@ -625,7 +625,7 @@ <li>Settings: port SUPL setting to new infrastructure</li> <li>Settings: remove icon for Internet connectivity check and remote key provisioning settings for now</li> <li>kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro: Mali GPU driver update</li> - <li>System Updater: add TLS key pinning with expiration 2 months in the future to make TLS more useful as an additional layer of security before the 3 layers of offline update signing (update package signature, update_engine payload signature and verified boot signature) while also avoiding blocking updates on extremely out-of-date installs falling behind changes to our TLS certificate approach</li> + <li>System Updater: add TLS key pinning with expiration 2 months in the future to make TLS more useful as an additional layer of security before the 3 layers of offline update signing with downgrade protection (update package signature, update_engine payload signature and verified boot signatures) while also avoiding blocking updates on extremely out-of-date installs falling behind changes to our TLS certificate approach</li> <li>update timezone data to Android mainline 331314030 (based on tzdata 2023a)</li> <li>kernel (Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.106</li> <li>Vanadium: update to <a href="https://github.com/GrapheneOS/Vanadium/releases/tag/113.0.5672.77.0">version 113.0.5672.77.0</a></li> |