theupdateframework / tuf / 1508

98%

develop: 97%

Pull #928

travis-ci

Add slow retrieval disclaimer

Since https://github.com/theupdateframework/tuf/pull/781 we
only provide limited protection against slow retrieval attacks.
So far this has only been discussed in above issue and hinted at
by a disabled test and a code comment in that test.

This change adds a corresponding disclaimer to a more prominent
place, i.e. the list of attacks in SECURITY.md.

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
Co-Authored-By: Trishank K Kuppusamy <33133073+trishankatdatadog@users.noreply.github.com>

2539 of 2638 branches covered (96.25%)

9033 of 9174 relevant lines covered (98.46%)

3.94 hits per line