Sender: w grabhive <wendel@314t.com>
From: Wendell <w@grabhive.com>
Content-Type: multipart/signed;
	boundary="Apple-Mail=_B197055C-92EA-4B95-9731-20410C73E52D";
	protocol="application/pgp-signature"; micalg=pgp-sha1
Date: Mon, 5 Aug 2013 16:39:49 +0200
Message-Id: <EE3869FD-6D83-469A-BF4F-31B79CA9950F@grabhive.com>
To: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Mime-Version: 1.0 (Apple Message framework v1283)
Subject: [Bitcoin-development] Safe auto-updating
Precedence: list


--Apple-Mail=_B197055C-92EA-4B95-9731-20410C73E52D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

For usability purposes, we at Hive would like to have an auto-updater in =
our wallet app.

What is a safe way to do this? I understand that Bitcoin-QT lacks such =
an updater for security reasons... Has been thought out in more detail =
since that decision was made?

We have been toying around with the idea of placing one server behind a =
Tor hidden service, whose only function is to output a checksum of the =
update package. The theory is that if it is well-secured, it will at =
least be immune to tampering at the physical hosting level.

Any thoughts or advice about any of this?

-wendell

grabhive.com | twitter.com/grabhive | gpg: 6C0C9411


--Apple-Mail=_B197055C-92EA-4B95-9731-20410C73E52D
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
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=X7PJ
-----END PGP SIGNATURE-----

--Apple-Mail=_B197055C-92EA-4B95-9731-20410C73E52D--