Skip to content

Commit 181c5bb

Browse files
committed
Correct snapshot role update
1 parent 7bc8003 commit 181c5bb

File tree

1 file changed

+5
-8
lines changed

1 file changed

+5
-8
lines changed

content/en/docs/metadata.md

+5-8
Original file line numberDiff line numberDiff line change
@@ -40,15 +40,12 @@ There may also be any number of delegated target roles.
4040

4141
Signed by: Root role.
4242

43-
The snapshot role signs a metadata file that provides information about the
44-
latest version of all targets metadata on the repository (the top-level targets
45-
role and all delegated roles). This information allows clients to know which
46-
metadata files have been updated and also prevents mix-and-match attacks.
43+
Specifies the other top-level roles. When specifying these roles, the trusted keys for each are listed, along with the minimum number of those keys required to sign the role's metadata. We call this number the signature threshold.
4744

48-
See
49-
[example](https://raw.githubusercontent.com/theupdateframework/tuf/develop/tests/repository_data/repository/metadata/root.json)
45+
See [example](https://raw.githubusercontent.com/theupdateframework/tuf/develop/tests/repository_data/repository/metadata/root.json)
5046
of Root metadata.
5147

48+
5249
## Targets Metadata (targets.json)
5350

5451
Signed by: Targets role.
@@ -102,8 +99,8 @@ of a nested delegation.
10299

103100
Signed by: Snapshot role.
104101

105-
The snapshot.json metadata file lists version numbers of all metadata files
106-
other than timestamp.json. This file ensures that clients will see a consistent
102+
The snapshot.json metadata file lists version numbers and/or hashes of all of
103+
the targets metadata files. This file ensures that clients will see a consistent
107104
view of all files on the repository. That is, metadata files (and thus Target
108105
files) that existed on the repository at different times cannot be combined and
109106
presented to clients by an attacker.

0 commit comments

Comments
 (0)