Insecure update error! DSA key. Sparkle

When I open Mail I receive a pop up - "Insecure update error! For security reasons, you need to sign your updates with a DSA key. See Sparkle's documentation for more information". I believe this is the result of me adding a new Plugin to Mail. I like the Plugin. How do I permanently remove this error message? I searched for information about Sparkle and I don't it is something I need, or want.

Posted on Feb 28, 2016 4:50 AM

Reply
2 replies

Feb 29, 2016 4:39 AM in response to barrygou

Sparkle is a software library used by many application developers as a means of distributing updates to their applications automatically over the Internet. However recently some security vulnerabilities where discovered in older versions of Sparkle.


See https://sparkle-project.org/documentation/security/

and http://arstechnica.co.uk/security/2016/02/huge-number-of-mac-apps-vulnerable-to- hijacking-and-a-fix-is-elusive/


Some corporates IT departments may have taken steps to block/disable Sparkle as a brute-force means of 'fixing' this security issue.


Rather than relying on the vulnerable version of Sparkle to update your application or in this case plugin with presumably also a new fixed version of Sparkle you should check on the authors website and manually download and install a new fixed version.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Insecure update error! DSA key. Sparkle

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.