Skip to content

Commit 6ba6352

Browse files
authored
Merge pull request #46 from trishankatdatadog/trishankatdatadog/root-consistent-snapshot
Clarify consistent snapshots w/ regard to root rotation
2 parents 9b72f69 + 2f0aaae commit 6ba6352

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

tuf-spec.md

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1009,7 +1009,9 @@ repo](https://github.com/theupdateframework/specification/issues).
10091009
Since it may now be signed using entirely different keys, the client must
10101010
somehow be able to establish a trusted line of continuity to the latest set
10111011
of keys (see Section 6.1). To do so, the client MUST download intermediate
1012-
root metadata files, until the latest available one is reached.
1012+
root metadata files, until the latest available one is reached. Therefore, it
1013+
MUST temporarily turn on consistent snapshots in order to download
1014+
_versioned_ root metadata files as described next.
10131015

10141016
* **1.1**. Let N denote the version number of the trusted root metadata file.
10151017

@@ -1064,6 +1066,9 @@ repo](https://github.com/theupdateframework/specification/issues).
10641066
paper](https://ssl.engineering.nyu.edu/papers/kuppusamy-mercury-usenix-2017.pdf)
10651067
for more details.
10661068

1069+
* **1.10**. **Set whether consistent snapshots are used as per the trusted
1070+
root metadata file** (see Section 4.3).
1071+
10671072
**2**. **Download the timestamp metadata file**, up to Y number of bytes
10681073
(because the size is unknown.) The value for Y is set by the authors of the
10691074
application using TUF. For example, Y may be tens of kilobytes. The filename

0 commit comments

Comments
 (0)