@@ -3,26 +3,25 @@ Title: The Update Framework Specification
33Shortname: TUF
44Status: LS
55Abstract: A framework for securing software update systems.
6- Date: 2023-04-14
6+ Date: 2026-01-19
77Editor: Justin Cappos, NYU
8- Editor: Trishank Karthik Kuppusamy, Datadog
9- Editor: Joshua Lock, Verizon
10- Editor: Marina Moore, NYU
11- Editor: Lukas Pühringer, NYU
8+ Editor: Trishank Karthik Kuppusamy, Apple
9+ Editor: Joshua Lock, VMware
10+ Editor: Marina Moore, Edera
11+ Editor: Lukas Pühringer, Eclipse
1212Repository: theupdateframework/specification
1313Mailing List: https://groups.google.com/forum/?fromgroups#!forum/theupdateframework
1414Indent: 2
1515Boilerplate: copyright no, conformance no
1616Local Boilerplate: header yes
1717Markup Shorthands: css no, markdown yes
1818Metadata Include: This version off, Abstract off
19- Text Macro: VERSION 1.0.33
19+ Text Macro: VERSION 1.0.34
2020</pre >
2121
2222Note: We strive to make the specification easy to implement, so if you come
2323across any inconsistencies or experience any difficulty, do let us know by
24- sending an email to our [ mailing list] (
25- https://groups.google.com/forum/?fromgroups#!forum/theupdateframework ),
24+ messaging us on the [ CNCF slack] ( https://communityinviter.com/apps/cloud-native/cncf ) channel #tuf,
2625or by reporting an issue in the [ specification repo] (
2726 https://github.com/theupdateframework/specification/issues ).
2827
@@ -752,7 +751,7 @@ The "signed" portion of <a>root.json</a> is as follows:
752751
753752 : <dfn >THRESHOLD</dfn >
754753 ::
755- An integer number of keys of that role whose signatures are required in
754+ A positive integer number of keys (>=1) of that role whose signatures are required in
756755 order to consider a file as being properly signed by that role.
757756
758757<div class =' example ' id =' example-root.json ' >
@@ -1040,6 +1039,12 @@ format:
10401039 The rolename MUST be unique in the delegations object: multiple roles with
10411040 the same rolename are not allowed within a <a >DELEGATIONS</a >.
10421041
1042+ : <dfn >THRESHOLD</dfn >
1043+ ::
1044+ A positive integer number of keys (>=1) of that role whose signatures are required in
1045+ order to consider a file as being properly signed by that role. See the notes on
1046+ <a >THRESHOLD</a > counting in the relevant steps of [[ #detailed-client-workflow]] .
1047+
10431048 : <dfn >TERMINATING</dfn >
10441049 ::
10451050 A boolean indicating whether subsequent delegations should be considered
@@ -1108,6 +1113,7 @@ that of the third one, etc. In order to accommodate prioritized
11081113delegations, the "roles" key in the <a >DELEGATIONS</a > object above points to an array
11091114of delegated roles, rather than to a hash table.
11101115
1116+
11111117The metadata files for delegated target roles has the same format as the
11121118top-level <a >targets.json</a > metadata file.
11131119
0 commit comments