Custom updater for Windows

[allexzander]

Custom updater for Windows

[allexzander]

@roberix Yes, this is something that I expected. So this needs to be designed thoroughly first.

[roberix]

Hi.

@allexzander

As much as I hate the current update process as enterprise customer (we do relulary have severe issues during updating) it gives me also the control I need. What we do is deploying the MSI (with autoupdate OFF) and we are fully in charge which version is installed.

Nextcloud is for our company a critial asset and judging the client versions which are sometimes released we do need to maintain full control. Giving away this control to the users (which will hump on every update button you will present to them) is a dangerous path.

Please whatever you implement - please consider to give the enterprise admins control over the client version management somehow.

On a securty side note - what you suggest makes a devastating supply chain attack more severe and more likely. If there will be a compromise then a self update can be a fatal event. We saw such events regulary in the recent past (Solarwinds..)

Best regards

rob

[allexzander]

@tobiasKaminsky @mgallien

As Matthieu mentioned during our call