Sebastien Awwad

Indexing targets with TUF is hard if using delegations

5

## The Importance of a Target Index First, let's be clear about this: if you're looking for the trustworthy target info (hash, length, etc.) for a target whose name you...

Note that the issue identified [in Uptane Standard issue 36](https://github.com/uptane/uptane-standard/issues/36) applies to the TUF specification as well. There is a tiny smidge more implied here in the TUF spec, but...

Timestamp and Root are likely to be the two most-downloaded files on a repository. Currently, Timestamp lists information for Snapshot in a different way than Snapshot lists information for Targets...

### Summary Items 4.5.1-4.5.9 in [the Detailed Workflows section (5.1) of the specification](https://github.com/theupdateframework/specification/blob/master/tuf-spec.md#5-detailed-workflows) do not instruct the implementer in how to "process" the delegated role files, and there are tempting...

## Summary In [Section 5 (Detailed Workflows)](https://github.com/theupdateframework/specification/blob/master/tuf-spec.md#5-detailed-workflows), item 4.5.1 of the spec, the meaning of "visited" should be clarified because an otherwise sensible interpretation can result in an unusual "attack"...

Part of #11804: Add integration tests for verification operations: - [ ] verification of repodata and expected solves - [ ] include metadata with some artifacts in the solution set...

### Summary Add integration tests to conda for conda-content-trust. ### Linked Issues & PRs - [ ] (Note that some of these tests can be copied from the tests in...