diff options
| author | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2015-02-17T12·16+0100 |
|---|---|---|
| committer | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2015-02-17T12·16+0100 |
| commit | f19b4abfb2c238a98f749812c9ba294dd98d8bd0 (patch) | |
| tree | c135e5fcc4e1dc2722119c624adb80a6385f80c5 /corepkgs/config.nix.in | |
| parent | 8c8750ae661559613ee357d5814505b933258aaf (diff) | |
Include NAR size in fingerprint computation
This is not strictly needed for integrity (since we already include the NAR hash in the fingerprint) but it helps against endless data attacks [1]. (However, this will also require download-from-binary-cache.pl to bail out if it receives more than the specified number of bytes.) [1] https://isis.poly.edu/~jcappos/papers/cappos_mirror_ccs_08.pdf
Diffstat (limited to 'corepkgs/config.nix.in')
0 files changed, 0 insertions, 0 deletions