diff --git a/i2p2www/pages/site/docs/how/network-database.html b/i2p2www/pages/site/docs/how/network-database.html index 6eb6b83bd7eb6f422b2e14a98b7f6566957958c6..dcac8532f8b54a4d281f3e02f3c746a8e50f0da9 100644 --- a/i2p2www/pages/site/docs/how/network-database.html +++ b/i2p2www/pages/site/docs/how/network-database.html @@ -1,7 +1,7 @@ {% extends "global/layout.html" %} {% block title %}{% trans %}The Network Database{% endtrans %}{% endblock %} -{% block lastupdated %}{% trans %}October 2013{% endtrans %}{% endblock %} -{% block accuratefor %}0.9.9{% endblock %} +{% block lastupdated %}{% trans %}June 2014{% endtrans %}{% endblock %} +{% block accuratefor %}0.9.14{% endblock %} {% block content %} <h2>{% trans %}Overview{% endtrans %}</h2> @@ -744,6 +744,13 @@ Several defenses are possible, and most of these are planned: Disallow fallback from HTTPS to HTTP for reseeding. A MITM attacker could simply block HTTPS, then respond to the HTTP. {%- endtrans %}</li> + <li>{% trans %}Bundling reseed data in the installer{% endtrans %}</li> +</ul> + +<p>{% trans -%} +Defenses that are implemented: +{%- endtrans %}</p> +<ul> <li>{% trans -%} Changing the reseed task to fetch a subset of RouterInfos from each of several reseed sites rather than using only a single site @@ -753,7 +760,12 @@ Creating an out-of-network reseed monitoring service that periodically polls reseed websites and verifies that the data are not stale or inconsistent with other views of the network {%- endtrans %}</li> - <li>{% trans %}Bundling reseed data in the installer{% endtrans %}</li> + <li>{% trans -%} +As of release 0.9.14, reseed data is bundled into a signed zip file and +the signature is verified when downloaded. +{%- endtrans %} +See <a href="{{ site_url('docs/spec/updates') }}#su3">the su3 specification</a> for details. +</li> </ul> <h3>{% trans %}Query Capture{% endtrans %}</h3> diff --git a/i2p2www/pages/site/docs/spec/updates.html b/i2p2www/pages/site/docs/spec/updates.html index 23c0a03962d781c356002ed29743a69a68830c49..762fa9dcf9a3dc5310e65999e71cfb2398353aae 100644 --- a/i2p2www/pages/site/docs/spec/updates.html +++ b/i2p2www/pages/site/docs/spec/updates.html @@ -1,7 +1,7 @@ {% extends "global/layout.html" %} {% block title %}{% trans %}I2P Software Update Specification{% endtrans %}{% endblock %} -{% block lastupdated %}{% trans %}February 2014{% endtrans %}{% endblock %} -{% block accuratefor %}0.9.11{% endblock %} +{% block lastupdated %}{% trans %}June 2014{% endtrans %}{% endblock %} +{% block accuratefor %}0.9.14{% endblock %} {% block content %} <h3>{% trans %}Overview{% endtrans %}</h3> <p>{% trans -%} @@ -170,10 +170,10 @@ The router will then delete the deletelist.txt file. {%- endtrans %}</p> -<h3>{% trans %}New "su3" Update File Specification{% endtrans %}</h3> +<h3 id="su3">{% trans %}New "su3" Update File Specification{% endtrans %}</h3> <p>{% trans -%} -This specification is used for router updates and reseed data as of release 0.9.9. +This specification is used for router updates as of release 0.9.9, and reseed data as of release 0.9.14. {%- endtrans %}</p> <h4>{% trans %}Issues with the previous .sud/.su2 format:{% endtrans %}</h4>