Skip to content

clonebundles: allow manifest to specify sha256 digest of bundles

Jörg Sonnenberger requested to merge topic/default/clonebundle-digest into branch/default

This is a bit of a proof of concept for authenticated clonebundles. Since clonebundles are often offloaded to a third party server (like a CDN) providing a digest (here: SHA256, SHA512) with the manifest improves trust as manipulation of the bundle can be detected.

Edited by Jörg Sonnenberger

Merge request reports