All the discussion so far, as I can see (sorry if I missed anything)
is about how to make sure that the whole update process is secure, but
I didn't see any discussion on the performance on the update servers
that this could have. Currently there is a lot of nmap users out there
and when they all start to run the version of nmap that will support
autoupdates/upgrades the amount of the traffic generated could be
significant. Maybe a thought of a different transport mechanism to
spread the load of the updates - torrent for example or something
Just an idea to think about.
Thanks for your suggestions. I'm glad this topic has provoked some
discussion and I know that Colin is paying attention to your ideas.
I've asked Colin not to worry about things like binary diffs and the
size of updates for the time being. Those are big topics on their own
and I fear that optimizing for them too early will hinder the
development of something that works. I think our priorities should be
first safety, then performance.
This may mean downloading a subset of the available files (but whole
files) quite frequently, or downloading all the files somewhat less