~welt/murse-lowfreq

[ANNOUCEMENT] Upcoming Breaking Changes To murse

Details
Message ID
<f27d1bba-df82-f122-6ed9-e5bd36e64d09@spiderden.net>
DKIM signature
missing
Download raw message
TVN has gone through some specification changes that require breaking 
changes in murse. In particular, the format used for revision files have 
been changed to include the revision number to prevent reordering 
attacks with signatures. This was done to enable the community to mirror 
the game files while ensuring they haven't been tampered with, as well 
as allowing people to download the game on untrusted networks.

The next non-patch release (0.3.0) will be a transitional release. It 
will support both the new format and the old format for upgrades and 
verification, but in a future non-patch version it will be removed. I 
expect 0.4.0 to remove this unless circumstances change.

What does this mean for Open Fortress players and server owners? Now's 
the time to upgrade murse in preparation for signing. 0.3.0 will 
continue to work perfectly fine as-is with the old format, and continue 
to work once we implement the changes. You won't be able to use the 
shiny new options just yet, but once the switch is done you're free to 
use them. DO NOT USE UNTRUSTED MIRRORS OR CONNECTIONS UNTIL WE FULLY 
SWITCH AND PROVIDE A PUBLIC KEY TO USE. SIGNATURE CHECKS REQUIRES NEW 
OPTIONS TO BE PROVIDED TO MURSE.
Reply to thread Export thread (mbox)