When the Going Gets Tough, Get TUF Going! [I]
summary
TUF (The Update Framework) is presented as a concrete signing architecture that prevents tampering, rollbacks and key compromise by splitting trust into four roles — root, targets, snapshot, timestamp — with expiry, delegation and optional threshold signing for resilience. A working Notary (Go implementation) is shown signing and verifying repository metadata, blocking altered downloads in a live demo, and integrating with Docker Content Trust to gate image deployment. The design favors whitelisting over blacklists and supports nested delegations for manageable publisher keys.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 3:47Asymmetric Crypto
- 11:05Package Signatures
- 14:09Root Role
- 21:12Improvements
- 23:58Demo
