ipfs/ipfs-desktop

Option to opt-out from auto-updates

Open

#1.695 aberto em 13 de out. de 2020

Ver no GitHub
 (3 comments) (1 reaction) (0 assignees)JavaScript (912 forks)batch import
P3area/macosarea/updatesarea/windowseffort/hoursexp/intermediatehelp wantedkind/enhancementstatus/ready

Métricas do repositório

Stars
 (5.632 stars)
Métricas de merge de PR
 (Mesclagem média 8d 12h) (6 fundiu PRs em 30d)

Description

Is your feature request related to a problem? Please describe. I was trying to use IPFS Desktop, but an update was available. I was not in a position where updating at the moment would be convenient, but there was no way to cancel/delay the auto-update, it was forced on me if I wanted to continue using IPFS Desktop.

Describe the solution you'd like When an update is available, I should be able to decline to update and continue using the application until such time as I'm ready to update. A nag at launch would be fine, though I should be able to tell it how long until it nags me again (e.g., delay for 1 day, or delay for 1 week).

Describe alternatives you've considered I tried to do the auto-update but it failed! This is related to another bug that is allegedly fixed in this version.

Additional context Auto-updates mean I cannot wait until after the update has been validated by my trust network. This means I have to implicitly trust whoever controls the other end of the endpoint, which is bad for security against motivated attackers as they only need to control the auto-update endpoint for a handful of hours to compromise many people. With updates spread out based on user decisions, the impact of taking over the endpoint is muted substantially.

Guia do colaborador