[tahoe-dev] CRISP Advisory 2008-01

[zooko]

On Jul 21, 2008, at 22:03 PM, Aleksandr Milewski wrote:
>
> My understanding from reading this is that no client or helper running
> code as distributed by allmydata/tahoe would have omitted this hash
> value, and thus the operational impact of the fix is zero.

Exactly.

> Just want to make sure that when I deploy this, we aren't going to get
> user complaints that their files can't be downloaded.

That's right.  All of the allmydata.com uploads have included the  
ciphertext hash in the upload, so turning on the requirement of that  
hash at download time will not cause any failures to download.

Regards,

Zooko