> On 10 Feb 2016, at 1:08 PM, Charles Srstka <cocoa...@charlessoft.com> wrote: > > If your app is accessing your appcast via HTTP, that could be intercepted > just the same as your relnotes, and then the attacker could set the relnotes > URL to whatever s/he wants.
Yep, I see that. Bugger. —G. _______________________________________________ Cocoa-dev mailing list (Cocoa-dev@lists.apple.com) Please do not post admin requests or moderator comments to the list. Contact the moderators at cocoa-dev-admins(at)lists.apple.com Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com