File tree 3 files changed +12
-11
lines changed
3 files changed +12
-11
lines changed Original file line number Diff line number Diff line change @@ -17,11 +17,12 @@ To learn more, see [TUF overview](/docs/overview/) and
17
17
18
18
## Governance
19
19
20
- The TUF project is managed by the [ Linux Foundation] under the [ Cloud Native Computing
21
- Foundation] [ CNCF ] . The consensus builder for TUF is [ Prof. Justin Cappos] of the
22
- [ Secure Systems Lab] at [ New York University] ( https://engineering.nyu.edu/ ) . Project
23
- maintainers <sup >[[ 1]] [[ 2]] </sup > are comprised of collaborators from academia and
24
- the industry. Contributors and maintainers are governed by the [ CNCF Community Code
20
+ The TUF project is managed by the [ Linux Foundation] under the [ Cloud Native
21
+ Computing Foundation] [ CNCF ] . The consensus builder for TUF is [ Prof. Justin
22
+ Cappos] of the [ Secure Systems Lab] at
23
+ [ New York University] ( https://engineering.nyu.edu/ ) . Project maintainers
24
+ <sup >[[ 1]] [[ 2]] </sup > are comprised of collaborators from academia and the
25
+ industry. Contributors and maintainers are governed by the [ CNCF Community Code
25
26
of Conduct] [ CoC ] . For details, see [ Governance] .
26
27
27
28
## Funding
Original file line number Diff line number Diff line change @@ -101,8 +101,8 @@ of a nested delegation.
101
101
102
102
Signed by: Snapshot role.
103
103
104
- The snapshot.json metadata file lists version numbers of all metadata files
105
- other than timestamp.json . This file ensures that clients will see a consistent
104
+ The snapshot.json metadata file lists version numbers and/or hashes of all of
105
+ the targets metadata files . This file ensures that clients will see a consistent
106
106
view of all files on the repository. That is, metadata files (and thus Target
107
107
files) that existed on the repository at different times cannot be combined and
108
108
presented to clients by an attacker.
Original file line number Diff line number Diff line change @@ -9,11 +9,11 @@ The TUF project consists of three components:
9
9
- [ Specification] – the detailed TUF specification describes how to add TUF
10
10
metadata to a repository and the process to arrange for clients to use that
11
11
metadata to download and verify targets.
12
- - [ Standardization process] – major changes to the specification, including new features,
13
- are made as TUF Augmentation Proposals (TAPs).
12
+ - [ Standardization process] – major changes to the specification, including new
13
+ features, are made as TUF Augmentation Proposals (TAPs).
14
14
- [ Reference implementation] – python-tuf provides a reference implementation of
15
- the TUF specification and is used as a vital part of the TAPs process to prototype
16
- changes to the specification.
15
+ the TUF specification and is used as a vital part of the TAPs process to
16
+ prototype changes to the specification.
17
17
18
18
The project is currently managed by a team of collaborators from academia and
19
19
industry.
You can’t perform that action at this time.
0 commit comments