[Bug 1215590] Showing the "Authentication Required" root prompt not immediately after clicking "Install" or "Update" in GNOME software is possibly fundamentally insecure

https://bugzilla.suse.com/show_bug.cgi?id=1215590 https://bugzilla.suse.com/show_bug.cgi?id=1215590#c2 --- Comment #2 from ell1e <el@horse64.org> --- This still seems to be happening in slowroll, sadly. Would it maybe be a good idea to file a bug report for this with gnome-software upstream, or what would be the right component for this? Specifically the timing of clicking "Install" and that leading to an admin prompt being so long, rather than upfronting the admin prompt even before the download or much else is done (which IMHO would make it comparably safe from a UX/forgery standpoint). -- You are receiving this mail because: You are on the CC list for the bug.