SparkleProject/sparkle-project.github.io
1
0
Fork 0
mirror of https://github.com/sparkle-project/sparkle-project.github.io.git synced 2025-11-01 15:35:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add note about keeping private keys safe (#153)

Browse Source
This commit is contained in:
Zorg
2022-07-02 17:13:35 -07:00
committed by GitHub
parent fba8da2025
commit b4ef4df453
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
documentation/index.md
+2
View File
@@ -89,6 +89,8 @@ Since Sparkle is downloading executable code to your users' systems, you must be
* [Updates of preference panes and plugins](/documentation/bundles/) *must* be signed with EdDSA.
* Updates to regular application bundles that are signed with Apple's Developer ID program are strongly recommended to be signed with EdDSA for better security and fallback. Sparkle now deprecates not using EdDSA for these updates.
Please ensure your signing keys are kept safe and cannot be stolen if your web server is compromised. One way to ensure this for example is not having your signing keys accessible from the machine that is hosting your product.
#### EdDSA (ed25519) signatures
To prepare signing with EdDSA signatures: