Use signature instead of hashing for auto-update about breach_core HOT 5 CLOSED

@deian all yours!

from breach_core.

Ideally the signature should be computed in dist/darwin.js and dist/linux.js to easily update the auto-update server.

from breach_core.

I need to tweak this a bit more, but I'd be curious to get your thoughts on the approach.

E.g., do we want a single signature file containing all the sha1sums?

from breach_core.

We can upload the signature file next to the tarball on s3 and point to it in the json from update.url, no?

from breach_core.

Thanks @deian for the implementation!

from breach_core.