From 41075cfe7fc41dd504664a25d96dc2d4c3d04891 Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Tue, 2 May 2023 14:50:36 -0400
Subject: [PATCH] add conservative key pinning for System Updater

---
 static/releases.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/static/releases.html b/static/releases.html
index 6619ab93..9ffa2672 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -599,6 +599,7 @@
 
                     <ul>
                         <li>kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro: Mali GPU driver update</li>
+                        <li>System Updater: add TLS key pinning with expiration 2 months in the future to make TLS more useful as an additional layer of security before the 3 layers of offline update signing (update package signature, update_engine payload signature and verified boot signature) while also avoiding blocking updates on extremely out-of-date installs falling behind changes to our TLS certificate approach</li>
                     </ul>
                 </article>
                 -->