On Thu, 31 Aug 2023 at 22:05, Björn Persson <Bjorn(a)xn--rombobjrn-67a.se> wrote:
The document doesn't say what design decisions were made based on
the
assumption of a friendly network.
Well, I can certainly add them -- this discussion was started so I can
add any missing information.
All of those design decisions need to
be reconsidered with the assumption that there are attackers on the LAN
who will abuse Passim any way they can, and that Passim must deal
reasonably with any and all attacks.
The fallback for being provided with data that doesn't match the
SHA256 checksum is to download the file from the CDN.
Richard