Hayden B
Hayden B
@dmitris Sorry for the delayed response. Overall I'm supportive of this change. Splitting `certificate-chain` into a set of roots and a set of intermediates is definitely a step in the...
Hey! We aren’t prioritizing support right now but are open to PRs! Happy to give pointers to help with the implementation. Implement the CertificateAuthority interface, https://github.com/sigstore/fulcio/blob/main/pkg/ca/ca.go#L28, and if possible, the...
We can refactor that. This flag will also be unnecessary if you ship the TSA trust roots with TUF.
I’m working on this now. Yea, I will use certificate-chain
Removing myself from this if anyone else wants to take it on
Pending agreement, I think we should have RSA be the same key ID calculation. Doing the complex computation with `0xff` doesn't feel worthwhile. Also note the update on the thread,...
Can we add a README in the test directory summarizing these different test files, to help direct implementers to where they should add tests, and discourage shell script tests?
Merging since none of the comments are blocking and since any open PRs might need to redo tests. Thanks again!
Would `type:string` and `format:base64` be a breaking change? I assume this PR isn't breaking because objects are effectively `format:byte`?
If I understand correctly, there's two things we should do: * Removing `format` from `LogEntry.attestation`, because a format for the object is meaningless (and its underlying `data` field correctly has...