Skip to content

Commit 6618520

Browse files
clarify how consistent snapshots are used for root rotation
Signed-off-by: Trishank K Kuppusamy <[email protected]>
1 parent bc97d96 commit 6618520

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

tuf-spec.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1009,7 +1009,8 @@ repo](https://github.com/theupdateframework/specification/issues).
10091009
Since it may now be signed using entirely different keys, the client must
10101010
somehow be able to establish a trusted line of continuity to the latest set
10111011
of keys (see Section 6.1). To do so, the client MUST download intermediate
1012-
root metadata files, until the latest available one is reached.
1012+
root metadata files, until the latest available one is reached. Therefore, it
1013+
must temporarily turn on consistent snapshots.
10131014

10141015
* **1.1**. Let N denote the version number of the trusted root metadata file.
10151016

@@ -1061,6 +1062,9 @@ repo](https://github.com/theupdateframework/specification/issues).
10611062
paper](https://ssl.engineering.nyu.edu/papers/kuppusamy-mercury-usenix-2017.pdf)
10621063
for more details.
10631064

1065+
* **1.10**. **Set whether consistent snapshots are used as per the trusted
1066+
root metadata file** (see Section 4.3).
1067+
10641068
**2**. **Download the timestamp metadata file**, up to Y number of bytes
10651069
(because the size is unknown.) The value for Y is set by the authors of the
10661070
application using TUF. For example, Y may be tens of kilobytes. The filename

0 commit comments

Comments
 (0)