Skip to content

Commit da50e09

Browse files
Update TUF threshold information and editor details (#314)
* Update TUF threshold information and editor details I'm proposing a patch spec update to make it clearer that a threshold of 0 (or less) is not allowed. See: GHSA-fphv-w9fq-2525 for more details. I've also updated people's affiliation and suggested that slack is the best way to contact us. Signed-off-by: Justin Cappos <justincappos@gmail.com> * Update tuf-spec.md Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com> Signed-off-by: Justin Cappos <justincappos@gmail.com> * Demote THRESHOLD "definition tag" in tuf-spec.md to fix lint Signed-off-by: Justin Cappos <justincappos@gmail.com> --------- Signed-off-by: Justin Cappos <justincappos@gmail.com> Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
1 parent e97795e commit da50e09

1 file changed

Lines changed: 15 additions & 10 deletions

File tree

tuf-spec.md

Lines changed: 15 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -5,24 +5,23 @@ Status: LS
55
Abstract: A framework for securing software update systems.
66
Date: 2026-01-22
77
Editor: Justin Cappos, NYU
8-
Editor: Trishank Karthik Kuppusamy, Datadog
8+
Editor: Trishank Karthik Kuppusamy, Apple
99
Editor: Joshua Lock, Verizon
10-
Editor: Marina Moore, NYU
11-
Editor: Lukas Pühringer, NYU
10+
Editor: Marina Moore, Edera
11+
Editor: Lukas Pühringer, Eclipse
1212
Repository: theupdateframework/specification
1313
Mailing List: https://groups.google.com/forum/?fromgroups#!forum/theupdateframework
1414
Indent: 2
1515
Boilerplate: copyright no, conformance no
1616
Local Boilerplate: header yes
1717
Markup Shorthands: css no, markdown yes
1818
Metadata Include: This version off, Abstract off
19-
Text Macro: VERSION 1.0.33
19+
Text Macro: VERSION 1.0.34
2020
</pre>
2121

2222
Note: We strive to make the specification easy to implement, so if you come
2323
across any inconsistencies or experience any difficulty, do let us know by
24-
sending an email to our [mailing list](
25-
https://groups.google.com/forum/?fromgroups#!forum/theupdateframework),
24+
messaging us on the [CNCF slack](https://communityinviter.com/apps/cloud-native/cncf) channel #tuf,
2625
or by reporting an issue in the [specification repo](
2726
https://github.com/theupdateframework/specification/issues).
2827

@@ -750,10 +749,9 @@ The "signed" portion of <a>root.json</a> is as follows:
750749
<a for="role">KEYID</a> represented in this key list and in other files,
751750
only one unique key has that <a for="role">KEYID</a>.
752751

753-
: <dfn>THRESHOLD</dfn>
754-
::
755-
An integer number of keys of that role whose signatures are required in
756-
order to consider a file as being properly signed by that role.
752+
As before the THRESHOLD must be a positive integer number of keys (>=1) of
753+
that role whose signatures are required in order to consider a file as being
754+
properly signed by that role.
757755

758756
<div class='example' id='example-root.json'>
759757
A <a>root.json</a> example file:
@@ -1040,6 +1038,12 @@ format:
10401038
The rolename MUST be unique in the delegations object: multiple roles with
10411039
the same rolename are not allowed within a <a>DELEGATIONS</a>.
10421040

1041+
: <dfn>THRESHOLD</dfn>
1042+
::
1043+
A positive integer number of keys (>=1) of that role whose signatures are required in
1044+
order to consider a file as being properly signed by that role. See the notes on
1045+
<a>THRESHOLD</a> counting in the relevant steps of [[#detailed-client-workflow]].
1046+
10431047
: <dfn>TERMINATING</dfn>
10441048
::
10451049
A boolean indicating whether subsequent delegations should be considered
@@ -1108,6 +1112,7 @@ that of the third one, etc. In order to accommodate prioritized
11081112
delegations, the "roles" key in the <a>DELEGATIONS</a> object above points to an array
11091113
of delegated roles, rather than to a hash table.
11101114

1115+
11111116
The metadata files for delegated target roles has the same format as the
11121117
top-level <a>targets.json</a> metadata file.
11131118

0 commit comments

Comments
 (0)