Hi,
I am relatively new to snap and am studying how security is implemented for snap application download. I just wanted to know if the snaps that are published are encrypted or just signed and transmitted when a client requests for an application. Also, what does role does macaroon actually play here?
Hello and welcome,
They’re not encrypted as otherwise either people wouldn’t be able to install them, or we’d need to publish the private key so everybody could use them.
Macaroons are just fancy security tokens that are handed out on authentication, and grant the holder certain rights without having to re-authenticate for a period of time.
