Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

离线包离线状态下不可用或加载不出来 #13

Closed
apigonthsky opened this issue Sep 3, 2019 · 1 comment
Closed

离线包离线状态下不可用或加载不出来 #13

apigonthsky opened this issue Sep 3, 2019 · 1 comment

Comments

@apigonthsky
Copy link

apigonthsky commented Sep 3, 2019

问题已经被解决了。
这个是阿里的安全方案设计,主要就是为了做验签。
无论是预置还是更新后的离线包都默认会做验签。
验签开关方法:https://tech.antfin.com/docs/2/118673
效果:关了验签后,离线包加载速度有了较大的提升,在断网情况下也可以使用了。

@SpinyTech
Copy link
Contributor

SpinyTech commented Sep 4, 2019

👍

这个问题是由于没有关闭验签,同时没有配置验签公钥,导致预置离线包验签失败的问题。

我们的安全策略是,对于所有缓存到本地的离线包,都进行签名校验机制,如果校验失败,会认为包体有风险,因此会走线上 fallback 地址,相当于本次走的在线版本,而没走离线包。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants