Comments (5)
Based off the two issues I just linked above, it should be noted that the URLs
field should be altered to not be a URL but also a path. This would allow simple relative paths on the all servers/mirrors. That is, every mirror might have the same directory structure and be identical, and in one line it could be noted that the root.json
is under meta/root.json
.
from taps.
from taps.
Let's say I have repo tuf.example.com
and it mirrors to tuf.foo.com
and tuf.bar.com
, but on all 3, I have the metadata served from meta/*.json
and the targets are still from /
. I want to be able to express that more simply. That is, all mirrors always have the metadata served from /meta
. Doing it with the URLs notation would require each mirror to have separate roots that all point to $self/meta
for the different pieces. This is more related to theupdateframework/python-tuf#463 than this issue itself, but I guess I wanted to express a perceived shortcoming here.
from taps.
@heartsucker Can you give us an example of the notation you'd like for TAP 5 to support?
Are you saying that the following is unwieldy, for example?
"root": {
// Fix the root role to keys controlled by the group of enterprise
// users instead of PyPI administrators.
"keyids": [...],
// And update the root metadata file from a privately controlled server.
"URLs": ["http://tuf.example.com/metadata/root.json",
"tuf.foo.com/metadata/root.json, "tuf.bar.com/metadata/root.json"],
...
},
from taps.
Closing discussion for rejected TAP.
from taps.
Related Issues (20)
- TAP process (TAP 1) HOT 7
- Allowing TAPs that are licensed with MIT or Apache 2.0? HOT 12
- TAP process: issue with pre-implementation phase visibility
- master branch protection HOT 6
- Discussion of TAP 15: Succinct hash bin delegations HOT 10
- Discussion of TAP 16: Snapshot Merkle trees HOT 3
- Discussion of TAP 12: Improving keyid flexibility HOT 4
- Discussion of TAP 14: Managing TUF Versions HOT 6
- Discussion of TAP 13: User Selection of the Top-Level Target Files Through Mapping Metadata HOT 1
- Discussion of TAP-17: Remove signature wrapper from TUF spec HOT 3
- POUF1 is out of date
- audit logs for root metadata changes
- Should POUF-1 allow whitespace for prettified output? HOT 2
- Define preferred style for wrapping and enforce with linter
- Discussion of Fulcio TAP (TAP 18) HOT 6
- [TAP 8] Should rotate files be listed in snapshot metadata? HOT 1
- Introduce a status for approved/accepted TAPs that are not intended to make it into the core specification
- TAP request: artifact discovery, index files and targets metadata HOT 1
- TAP 19: should discuss privacy HOT 1
- Support for downgrading/revoking a version? HOT 10
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from taps.