quote:
Originally posted by Menthix
Something I never really understood though. Why are half of the installer files still digitally signed by Patchou (when you update) and the other installers are signed by Yuna Software?
That has to do with the way auto-updates are protected. When Messenger Plus! downloads the update file (as part of auto updates of /checkupdates manual downloads), it authenticates the file before launching it. This way, if some day, someone was to hack our servers and replace the update file by something else, it would not be executed on clients computers.
Until last year, Messenger Plus! was told to validate on my own signature: "Patchou". Now, it validates both "Patchou" and "Yuna Software". In order for old Messenger Plus! installations to accept the update, the auto-update file has to be signed by "Patchou". This will eventually be phased out this year as it won't be needed anymore.
/ 
![[Image: signature2.gif]](http://www.patchou.com/perso/signature2.gif)
