Comment by nailer
3 hours ago
I imagine their response would be: "we need to parse a new file format, that may have been edited by users, reliably. That takes time."
3 hours ago
I imagine their response would be: "we need to parse a new file format, that may have been edited by users, reliably. That takes time."
Why would they need to? Can’t they ship an update that runs an executable that uses the already-existing tooling to update the pem? They’ve posted the cli instructions, so, ship that as a shell script and run it. It should be idempotent, whether the user has already “untrusted” it or not.