Skip to content

Commit a6bae0f

Browse files
authored
Update TUF threshold information and editor details
I'm proposing a patch spec update to make it clearer that a threshold of 0 (or less) is not allowed. See: GHSA-fphv-w9fq-2525 for more details. I've also updated people's affiliation and suggested that slack is the best way to contact us. Signed-off-by: Justin Cappos <justincappos@gmail.com>
1 parent 258ad50 commit a6bae0f

File tree

1 file changed

+15
-9
lines changed

1 file changed

+15
-9
lines changed

tuf-spec.md

Lines changed: 15 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -3,26 +3,25 @@ Title: The Update Framework Specification
33
Shortname: TUF
44
Status: LS
55
Abstract: A framework for securing software update systems.
6-
Date: 2023-04-14
6+
Date: 2026-01-19
77
Editor: Justin Cappos, NYU
8-
Editor: Trishank Karthik Kuppusamy, Datadog
9-
Editor: Joshua Lock, Verizon
10-
Editor: Marina Moore, NYU
11-
Editor: Lukas Pühringer, NYU
8+
Editor: Trishank Karthik Kuppusamy, Apple
9+
Editor: Joshua Lock, VMware
10+
Editor: Marina Moore, Edera
11+
Editor: Lukas Pühringer, Eclipse
1212
Repository: theupdateframework/specification
1313
Mailing List: https://groups.google.com/forum/?fromgroups#!forum/theupdateframework
1414
Indent: 2
1515
Boilerplate: copyright no, conformance no
1616
Local Boilerplate: header yes
1717
Markup Shorthands: css no, markdown yes
1818
Metadata Include: This version off, Abstract off
19-
Text Macro: VERSION 1.0.33
19+
Text Macro: VERSION 1.0.34
2020
</pre>
2121

2222
Note: We strive to make the specification easy to implement, so if you come
2323
across any inconsistencies or experience any difficulty, do let us know by
24-
sending an email to our [mailing list](
25-
https://groups.google.com/forum/?fromgroups#!forum/theupdateframework),
24+
messaging us on the [CNCF slack](https://communityinviter.com/apps/cloud-native/cncf) channel #tuf,
2625
or by reporting an issue in the [specification repo](
2726
https://github.com/theupdateframework/specification/issues).
2827

@@ -752,7 +751,7 @@ The "signed" portion of <a>root.json</a> is as follows:
752751

753752
: <dfn>THRESHOLD</dfn>
754753
::
755-
An integer number of keys of that role whose signatures are required in
754+
A positive integer number of keys (>=1) of that role whose signatures are required in
756755
order to consider a file as being properly signed by that role.
757756

758757
<div class='example' id='example-root.json'>
@@ -1040,6 +1039,12 @@ format:
10401039
The rolename MUST be unique in the delegations object: multiple roles with
10411040
the same rolename are not allowed within a <a>DELEGATIONS</a>.
10421041

1042+
: <dfn>THRESHOLD</dfn>
1043+
::
1044+
A positive integer number of keys (>=1) of that role whose signatures are required in
1045+
order to consider a file as being properly signed by that role. See the notes on
1046+
<a>THRESHOLD</a> counting in the relevant steps of [[#detailed-client-workflow]].
1047+
10431048
: <dfn>TERMINATING</dfn>
10441049
::
10451050
A boolean indicating whether subsequent delegations should be considered
@@ -1108,6 +1113,7 @@ that of the third one, etc. In order to accommodate prioritized
11081113
delegations, the "roles" key in the <a>DELEGATIONS</a> object above points to an array
11091114
of delegated roles, rather than to a hash table.
11101115

1116+
11111117
The metadata files for delegated target roles has the same format as the
11121118
top-level <a>targets.json</a> metadata file.
11131119

0 commit comments

Comments
 (0)