On Sat, May 01, 2021 at 11:40:01PM +0200, Maxime Devos wrote: > Tags: + security > > Hi guix, > > Consider the following situation:
Check this blog post and The Update Framework's concept of "indefinite freeze attacks", which I think is what you are describing: https://guix.gnu.org/en/blog/2020/securing-updates/ https://theupdateframework.io/ (check the "specification")