Want to highlight a helpful answer? Upvote!

Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Insecure update error! DSA key. Sparkle

When I open Mail I receive a pop up - "Insecure update error! For security reasons, you need to sign your updates with a DSA key. See Sparkle's documentation for more information". I believe this is the result of me adding a new Plugin to Mail. I like the Plugin. How do I permanently remove this error message? I searched for information about Sparkle and I don't it is something I need, or want.

Posted on Feb 28, 2016 4:50 AM

Reply
Question marked as Best reply

Posted on Feb 28, 2016 4:54 AM

Contact the maker of that Plugin to ask if there's an update coming. Only (s)he can solve this for you.

2 replies

Feb 29, 2016 4:39 AM in response to barrygou

Sparkle is a software library used by many application developers as a means of distributing updates to their applications automatically over the Internet. However recently some security vulnerabilities where discovered in older versions of Sparkle.


See https://sparkle-project.org/documentation/security/

and http://arstechnica.co.uk/security/2016/02/huge-number-of-mac-apps-vulnerable-to- hijacking-and-a-fix-is-elusive/


Some corporates IT departments may have taken steps to block/disable Sparkle as a brute-force means of 'fixing' this security issue.


Rather than relying on the vulnerable version of Sparkle to update your application or in this case plugin with presumably also a new fixed version of Sparkle you should check on the authors website and manually download and install a new fixed version.

Insecure update error! DSA key. Sparkle

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.