Luke Hinds

I am not sure if I am following correctly, there is a gossip protocol that was defined and played with to distribute tree(s) in certificate transparency.

Interesting, I think there is still valid use for a dlog (I just made a word). How do you see the re-attesting occur , would this be a case of...

likely same for fulcio as well

> Is this for the CLI/client? So basically test the client against the running version of the prod server? Yup! Currently if someone pulls down 0.2.0 and aims it at...

Will rekor still be able operate independently of a fulcio instance being present, e.g. this proposal is implemented in a modular way so the operator can run either with this...

can we close this for now @ianlewis or do you still need anything addressed?

We already support device flow though, is this lacking somehow https://github.com/sigstore/sigstore/blob/main/pkg/oauthflow/device_test.go ?

> Apologies, I wasn't aware of device flow or how to invoke it. Perhaps it's simply that gitsign isn't supporting the device flow. Can gitsign theoretically fall back to using...

thanks to bob for pointing me to the entries in test, will self assign and add a where to find pointer

figure this can be closed, but checking to be sure @dlorenc ?