Groups keyboard shortcuts have been updated

Dismiss

See shortcuts

The Update Framework (TUF)

1–30 of 258

0 selected

Kelly Walfgan, Trishank Kuppusamy3

Mar 14

Documentation not update

Sorry, would you please reply-all and include @The Update Framework (TUF) next time? So, what is the

unread,

Documentation not update

Sorry, would you please reply-all and include @The Update Framework (TUF) next time? So, what is the

Mar 14

Milan Satpathy, Jussi Kukkonen3

Jan 15

Client update failing due root metadata version

Missed this: > I would like to understand why the client should fail abruptly when it doesn't

unread,

Client update failing due root metadata version

Missed this: > I would like to understand why the client should fail abruptly when it doesn't

Jan 15

Martin Harriman, … Trishank Kuppusamy6

12/17/24

5.6.7 role not in snapshot

On Sat, 14 Dec 2024 at 20:58, Justin Cappos <jca...@poly.edu> wrote: Are there any cases where

unread,

5.6.7 role not in snapshot

On Sat, 14 Dec 2024 at 20:58, Justin Cappos <jca...@poly.edu> wrote: Are there any cases where

12/17/24

Kelly Walfgan, Jussi Kukkonen2

12/16/24

updater class (ngclient)

On Sun, Dec 15, 2024 at 1:35 PM Kelly Walfgan <walfga...@gmail.com> wrote: In my repo, I

unread,

updater class (ngclient)

On Sun, Dec 15, 2024 at 1:35 PM Kelly Walfgan <walfga...@gmail.com> wrote: In my repo, I

12/16/24

Milan Satpathy, Jussi Kukkonen2

11/6/24

Query on version and expiry management of metadata

Hi, some responses inline. On Wed, Nov 6, 2024 at 11:52 AM 'Milan Satpathy' via The Update

unread,

Query on version and expiry management of metadata

Hi, some responses inline. On Wed, Nov 6, 2024 at 11:52 AM 'Milan Satpathy' via The Update

11/6/24

Milan Satpathy, Lukas Pühringer2

7/15/24

Future plans for local key management

Hi, Thanks for reaching out! To sign TUF Metadata the new python-tuf library takes an object, which

unread,

Future plans for local key management

Hi, Thanks for reaching out! To sign TUF Metadata the new python-tuf library takes an object, which

7/15/24

Milan Satpathy, Jussi Kukkonen2

5/29/24

Using TUF 5.0.0 to create a persistent repository

python-tuf is now a library only: we felt the CLI tools were A) painful to maintain and B) not a

unread,

Using TUF 5.0.0 to create a persistent repository

python-tuf is now a library only: we felt the CLI tools were A) painful to maintain and B) not a

5/29/24

Suvasis Mukherjee, … Jussi Kukkonen5

4/16/24

UAV firmware update framework using TUF

Hi suvasis, The UAV-specific bits I can't possibly comment on but maybe this helps: TUF client

unread,

UAV firmware update framework using TUF

Hi suvasis, The UAV-specific bits I can't possibly comment on but maybe this helps: TUF client

4/16/24

Jianming Xu, Justin Cappos2

11/2/23

The issue of Root key loss and trust chain reconstruction

I'm curious to know more about the threshold you are choosing for root keys and the frequency

unread,

The issue of Root key loss and trust chain reconstruction

I'm curious to know more about the threshold you are choosing for root keys and the frequency

11/2/23

dbrassard, … Trishank Kuppusamy6

10/12/23

[TUF] 5.5. Update the snapshot role - How would you recall a target file

On Thu, 12 Oct 2023 at 16:36, Denis Brassard <denisb...@gmail.com> wrote: Right, I was

unread,

[TUF] 5.5. Update the snapshot role - How would you recall a target file

On Thu, 12 Oct 2023 at 16:36, Denis Brassard <denisb...@gmail.com> wrote: Right, I was

10/12/23

Shubhika Bhardwaj, Aditya Sirish A Yelgundhalli3

1/24/23

First time contributer on TUF. Help Needed

Thanks Aditya! On Tue, Jan 24, 2023, 11:13 PM Aditya Sirish A Yelgundhalli <aditya...@nyu.edu

unread,

First time contributer on TUF. Help Needed

Thanks Aditya! On Tue, Jan 24, 2023, 11:13 PM Aditya Sirish A Yelgundhalli <aditya...@nyu.edu

1/24/23

Sumana Harihareswara, … Lukas Puehringer4

12/12/22

PyCon in April 2023 - propose talk + poster by Friday

I won't make it to Utah either. (Happy to submit to EuroPython, though.) > On 10.12.2022, at

unread,

PyCon in April 2023 - propose talk + poster by Friday

I won't make it to Utah either. (Happy to submit to EuroPython, though.) > On 10.12.2022, at

12/12/22

Trishank Kuppusamy

9/8/22

[go-tuf] Security advisory (GHSA-3633-5h82-39pq): Improper handling of different key IDs for the same public keys in attacker-controlled metadata

Hello, We are writing to inform you of a high-impact but low-severity vulnerability in go-tuf clients

unread,

[go-tuf] Security advisory (GHSA-3633-5h82-39pq): Improper handling of different key IDs for the same public keys in attacker-controlled metadata

Hello, We are writing to inform you of a high-impact but low-severity vulnerability in go-tuf clients

9/8/22

5/13/22

TUF meetup at Kubecon Thu May 19th 11AM

Hi all, For those going to Kubecon next week: We're planning to do an informal TUF meetup 11AM on

unread,

TUF meetup at Kubecon Thu May 19th 11AM

Hi all, For those going to Kubecon next week: We're planning to do an informal TUF meetup 11AM on

5/13/22

Thibault Normand, … Lukas Puehringer14

4/19/22

Usage of existing crypto material serialization framework (JWK)

On 14.04.2022, at 15:46, 'Thibault Normand' via The Update Framework (TUF) <

unread,

Usage of existing crypto material serialization framework (JWK)

On 14.04.2022, at 15:46, 'Thibault Normand' via The Update Framework (TUF) <

4/19/22

Sumana Harihareswara, … Lukas Puehringer5

4/4/22

EuroPython call for talks closes in 3 days

Quick heads-up: Kairo and I have re-worked the proposal a bit and are now both listed as speakers for

unread,

EuroPython call for talks closes in 3 days

Quick heads-up: Kairo and I have re-worked the proposal a bit and are now both listed as speakers for

4/4/22

B. van Lunteren, … Jussi Kukkonen3

4/1/22

Inspecting trusted targets

Hi, TUF (as in the TUF specification) doesn't really provide any means for searching for things -

unread,

Inspecting trusted targets

Hi, TUF (as in the TUF specification) doesn't really provide any means for searching for things -

4/1/22

B. van Lunteren, … Trishank Kuppusamy6

3/24/22

Is python-tuf production ready?

On Thu, Mar 24, 2022 at 11:06 PM Joshua Lock <jl...@vmware.com> wrote: The python-tuf

unread,

Is python-tuf production ready?

On Thu, Mar 24, 2022 at 11:06 PM Joshua Lock <jl...@vmware.com> wrote: The python-tuf

3/24/22

Tim Lehnen, … Trishank Kuppusamy3

3/16/22

Drupal Association seeking contractor for server-side TUF implementation

Hi PHP friends, At the OpenSSF, we've formed a WG on securing community repos together. Would

unread,

Drupal Association seeking contractor for server-side TUF implementation

Hi PHP friends, At the OpenSSF, we've formed a WG on securing community repos together. Would

3/16/22

Lukas Puehringer

2/10/22

GitHub organization permission updates

Hello everyone! We updated the individual access levels for members and collaborators of the GitHub

unread,

GitHub organization permission updates

Hello everyone! We updated the individual access levels for members and collaborators of the GitHub

2/10/22

Marina Moore, … Joshua Lock3

12/10/21

TAP Acceptance at TUF Community Meeting

Unfortunately, I won't make the community meeting next week, so I have been looking at TAPs 13

unread,

TAP Acceptance at TUF Community Meeting

Unfortunately, I won't make the community meeting next week, so I have been looking at TAPs 13

12/10/21

Zach Wasserman, … Jussi Kukkonen4

9/1/21

Compromise of local repository in threat model

Just dug this thread from the spam folder so I'm a bit late to the discussion, apologies. I saw

unread,

Compromise of local repository in threat model

Just dug this thread from the spam folder so I'm a bit late to the discussion, apologies. I saw

9/1/21

8/26/21

Uptane Workshop

Hello, Uptane, the automotive variant of TUF, is having a workshop next month. The free registration

unread,

Uptane Workshop

Hello, Uptane, the automotive variant of TUF, is having a workshop next month. The free registration

8/26/21

Matt Rutkowski, … Trishank Kuppusamy3

8/19/21

Good examples of role-based CI/CD approval process signing/key construction/verification

On Thursday, August 19, 2021 at 1:35:00 PM UTC-4 sant...@nyu.edu wrote: I think in-toto (or a

unread,

Good examples of role-based CI/CD approval process signing/key construction/verification

On Thursday, August 19, 2021 at 1:35:00 PM UTC-4 sant...@nyu.edu wrote: I think in-toto (or a

8/19/21

8/19/21

TUF Community Meeting

Hi, The next TUF community meeting will be next week on August 25 at 11am EST. The agenda and meeting

unread,

TUF Community Meeting

Hi, The next TUF community meeting will be next week on August 25 at 11am EST. The agenda and meeting

8/19/21

7/28/21

Re: TUF Community Meeting

Sorry, I can't make it. We'll have to reschedule.

unread,

Re: TUF Community Meeting

Sorry, I can't make it. We'll have to reschedule.

7/28/21

Pedro Gabriel, Trishank Kuppusamy2

7/27/21

TUF vs GIthub Releaases + Webhooks

Sorry, I don't fully understand what you mean. Would you mind giving concrete examples? On Sat,

unread,

TUF vs GIthub Releaases + Webhooks

Sorry, I don't fully understand what you mean. Would you mind giving concrete examples? On Sat,

7/27/21

Tony Arcieri, … Trishank Kuppusamy7

7/22/21

Debian moving away from OpenPGP signatures

On Thu, Jul 22, 2021 at 9:17 AM Joshua Lock <jl...@vmware.com> wrote: I don't think they

unread,

Debian moving away from OpenPGP signatures

On Thu, Jul 22, 2021 at 9:17 AM Joshua Lock <jl...@vmware.com> wrote: I don't think they

7/22/21

Aditya Sirish A Yelgundhalli

6/24/21

Proposal of TAP-17 & Updates to POUF-1

Hello all, Marina Moore and I have co-authored TAP-17 which proposes removing the descriptions of

unread,

Proposal of TAP-17 & Updates to POUF-1

Hello all, Marina Moore and I have co-authored TAP-17 which proposes removing the descriptions of

6/24/21

4/21/21

TUF Community Meeting

Hi everyone, It's looking like time for another TUF community meeting. I made a doodle poll for

unread,

TUF Community Meeting

Hi everyone, It's looking like time for another TUF community meeting. I made a doodle poll for

4/21/21

Search

Clear search

Close search

Google apps

Main menu