alt Hacker NewsI imagine their response would be: "we need to parse a new file format, that may have been edited by users, reliably. That takes time."
Replies
seam_carver • yesterday at 10:15 PM
Isn't the file overwritten every update?
I imagine their response would be: "we need to parse a new file format, that may have been edited by users, reliably. That takes time."
Isn't the file overwritten every update?
Why would they need to? Can’t they ship an update that runs an executable that uses the already-existing tooling to update the pem? They’ve posted the cli instructions, so, ship that as a shell script and run it. It should be idempotent, whether the user has already “untrusted” it or not.