Skip to content

Commit 5b10c89

Browse files
committed
Remove mention of slow retrieval attacks
Slow retrieval attacks were removed from the specification in v1.0.7 of the TUF specification because the specification itself does not provide mechanisms to protect against this type of attack: theupdateframework/specification#111 Signed-off-by: Joshua Lock <[email protected]>
1 parent 983ed7c commit 5b10c89

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

content/security.md

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -46,10 +46,6 @@ the client is kept unaware of new files.
4646
with an endless stream of data, causing harm to clients (e.g. a disk partition
4747
filling up or memory exhaustion).
4848

49-
* **Slow retrieval attacks**. An attacker responds to clients with a very
50-
slow stream of data that essentially results in the client never completing
51-
the update process.
52-
5349
* **Extraneous dependencies attacks**. An attacker indicates to clients that,
5450
in order to install the software they want, they also need to install
5551
unrelated software. This extra software may be from a trusted source,

0 commit comments

Comments
 (0)