dragonx

24,173 Commits 5 Branches 7 Tags

3 Commits

Author	SHA1	Message	Date
Kevin Gallagher	13f9b4bacc	Adds note about updating guide during testnet deployment	2016-10-04 15:46:18 -07:00
Kevin Gallagher	d94ce512b4	Inserts some notes related to testnet deployment	2016-10-03 11:06:36 -07:00
Kevin Gallagher	e70213103c	Verify TLS certificates w/ wget in fetch-params.sh Per NCC-2016-017, wget was run with --no-check-certificate, which means that the connection can be man-in-the-middled, even if we are verifying the integrity of the params later via hash sums. The rationale cited in the Bash comments does not stand up to scrutiny. There's really no persuasive reason not to verify certificates. Fixes #1346.	2016-09-30 12:08:15 -07:00

Author

SHA1

Message

Date

Kevin Gallagher

13f9b4bacc

Adds note about updating guide during testnet deployment

2016-10-04 15:46:18 -07:00

Kevin Gallagher

d94ce512b4

Inserts some notes related to testnet deployment

2016-10-03 11:06:36 -07:00

Kevin Gallagher

e70213103c

Verify TLS certificates w/ wget in fetch-params.sh

Per NCC-2016-017, wget was run with --no-check-certificate,
which means that the connection can be man-in-the-middled,
even if we are verifying the integrity of the params later via hash sums.
The rationale cited in the Bash comments does not stand up to scrutiny.
There's really no persuasive reason not to verify certificates.

Fixes #1346.

2016-09-30 12:08:15 -07:00