File tree Expand file tree Collapse file tree 1 file changed +6
-1
lines changed Expand file tree Collapse file tree 1 file changed +6
-1
lines changed Original file line number Diff line number Diff line change @@ -1009,7 +1009,9 @@ repo](https://github.com/theupdateframework/specification/issues).
1009
1009
Since it may now be signed using entirely different keys, the client must
1010
1010
somehow be able to establish a trusted line of continuity to the latest set
1011
1011
of keys (see Section 6.1). To do so, the client MUST download intermediate
1012
- root metadata files, until the latest available one is reached.
1012
+ root metadata files, until the latest available one is reached. Therefore, it
1013
+ MUST temporarily turn on consistent snapshots in order to download
1014
+ _ versioned_ root metadata files as described next.
1013
1015
1014
1016
* ** 1.1** . Let N denote the version number of the trusted root metadata file.
1015
1017
@@ -1064,6 +1066,9 @@ repo](https://github.com/theupdateframework/specification/issues).
1064
1066
paper] ( https://ssl.engineering.nyu.edu/papers/kuppusamy-mercury-usenix-2017.pdf )
1065
1067
for more details.
1066
1068
1069
+ * ** 1.10** . ** Set whether consistent snapshots are used as per the trusted
1070
+ root metadata file** (see Section 4.3).
1071
+
1067
1072
** 2** . ** Download the timestamp metadata file** , up to Y number of bytes
1068
1073
(because the size is unknown.) The value for Y is set by the authors of the
1069
1074
application using TUF. For example, Y may be tens of kilobytes. The filename
You can’t perform that action at this time.
0 commit comments