taps
taps copied to clipboard
theupdateframework
TUF Augmentation Proposals (TAPs)
This pr adds the rust implementation, makes a couple of simplifications to the specification section to ensure the efficient Merkle BPT implementation is supported, and moves the TAP to accepted.
This TAP proposes extending the spec to describe how clients should initialize with local metadata, as well as allowing for a metadata backstop to protect against local rollback attacks. This...
TAP 8 proposal is available at https://github.com/theupdateframework/taps/blob/master/tap8.md Pull requests related to TAP 8: https://github.com/theupdateframework/taps/pull/20 Discussion of TAP 8 on the TUF mailing list: https://groups.google.com/d/msg/theupdateframework/Yj1z3PkMRZc/n8wXM4VZBgAJ
There are some remaining issues on the Fulcio TAP: * link to Sigstore documentation (as it is created) for root signing, signing, bundles, and verification
While I was readin up on passim (a mDNS based content addressable storage) I noticed that their main use case fwupd does not use passim for artifact downloads because of...
The following observations have been made at several points in time by different people and might be worth an informational TAP: - Artifact (target) discovery is not part of the...
In the most recent community meeting there was a sidebar discussion on the complexity of implementing TUF and how several TAPs (specifically TAP 4 and TAP 8) increase complexity for...
Discussed during review of #163 (https://github.com/theupdateframework/taps/pull/163#issuecomment-1371392933) we should define a stance on wrapping and add a linter to ensure pull requests conform to the preferred style. @mnm678 expressed a desire...
In this conversation on [#tuf](https://cloud-native.slack.com/archives/C8NMD3QJ3/p1663957309380139), I'm in the process of renaming rust-tuf's interchange types to `pouf`, since that's more aligned with the tuf project. One complication though is that rust-tuf...
TAP 15: Succinct hash bin delegations is available at https://github.com/theupdateframework/taps/blob/master/tap15.md Pull requests related to TAP 15: https://github.com/theupdateframework/taps/pull/120 Outstanding items for TAP 15: * Can we make it more clear in...