I’d like to see some thoughts on where we go from here. Is there a way we can keep end users protected even despite potential compromise of services like ToDesktop?

(eg: companies still hosting some kind of integrity checking service themselves and the download is verified against that… likely there’s smarter ideas)

The user experience of auto-update is great, but having a single fatal link in the chain seems worrying. Can we secure it better?