search

SJSU-CS-systems-group / DDD

2 stars 0 forks source link

rip out the signature logic in the bundle processing #201

Open breed opened 1 month ago

breed commented 1 month ago

signal does an integrity check while encrypting/decrypting. there is no reason to have the signature file or the meta-inf directory.

breed commented 1 month ago

we should also have the unencrypted bundleid in the inner jar so that we can check that the payload hasn't been changed.

breed commented 2 weeks ago

still need to put the unencrypted bundleid (and check it) in the inner jar.