[tahoe-dev] CRISP Advisory 2008-01

[Aleksandr Milewski]

On Jul 21, 2008, at 9:54 AM, zooko wrote:


> That integrity check was made optional in Tahoe
> v1.0 -- downloaders didn't require it but would check it if it was
> present, and uploaders still produced it.
>

<snip>

> Therefore it was very easy to fix this -- we just made downloaders
> require that hash value and refuse to accept a file that doesn't have
> it.

Just to clarify the operational impact on allmydata.com:

My understanding from reading this is that no client or helper running  
code as distributed by allmydata/tahoe would have omitted this hash  
value, and thus the operational impact of the fix is zero.

Just want to make sure that when I deploy this, we aren't going to get  
user complaints that their files can't be downloaded.

-Zandr