@@ -1227,11 +1227,11 @@ the timestamp metadata file.
1227
1227
these conditions are not met, discard the new snapshot metadata file, abort
1228
1228
the update cycle, and report the failure.
1229
1229
1230
- * ** 5.4.5** . ** Check for a freeze attack.** The latest known time MUST be
1231
- lower than the expiration timestamp in the new snapshot metadata file. If
1232
- so, the new snapshot metadata file becomes the trusted snapshot metadata
1233
- file. If the new snapshot metadata file is expired, discard it, abort the
1234
- update cycle, and report the potential freeze attack.
1230
+ * ** 5.4.5** . ** Check for a freeze attack.** The expiration timestamp in the
1231
+ new snapshot metadata file MUST be higher than the fixed update expiration
1232
+ time. If so, the new snapshot metadata file becomes the trusted snapshot
1233
+ metadata file. If the new snapshot metadata file is expired, discard it,
1234
+ abort the update cycle, and report the potential freeze attack.
1235
1235
1236
1236
1237
1237
* ** 5.4.6** . ** Persist snapshot metadata.** The client MUST write the file to
@@ -1264,11 +1264,11 @@ snapshot metadata file.
1264
1264
in the trusted snapshot metadata. If the versions do not match, discard it,
1265
1265
abort the update cycle, and report the failure.
1266
1266
1267
- * ** 5.5.4** . ** Check for a freeze attack.** The latest known time MUST be
1268
- lower than the expiration timestamp in the new targets metadata file. If so,
1269
- the new targets metadata file becomes the trusted targets metadata file. If
1270
- the new targets metadata file is expired, discard it, abort the update cycle ,
1271
- and report the potential freeze attack.
1267
+ * ** 5.5.4** . ** Check for a freeze attack.** The expiration timestamp in the
1268
+ new targets metadata file MUST be higher than the fixed update expiration
1269
+ time. If so, the new targets metadata file becomes the trusted targets
1270
+ metadata file. If the new targets metadata file is expired, discard it,
1271
+ abort the update cycle, and report the potential freeze attack.
1272
1272
1273
1273
* ** 5.5.5** . ** Persist targets metadata.** The client MUST write the file to
1274
1274
non-volatile storage as FILENAME.EXT (e.g. targets.json).
0 commit comments