Tracking: Security, Trust models, Improving the status quo
Open
@kinnison is already working on this.
Since Sep 28, 2019.
security
- Dominant language
- Rust
- Stars
- 7k
- Forks
- 1.1k
- Avg merge
- 22h 40m
- Merged PRs (30d)
- 46
Description
In order to properly improve rustup's security and trust model, we need to tackle a number of issues. When these are all dealt with, then we'll be in a better position to protect our users and thus we can consider enabling some kind of mirror or alternative-dist-server-by-default mechanisms.
- Simple signature verification with embedded static key available on all
rustuptargets (#2028) - Design and implement a better trust model than the above (#2029)
- Signed Windows binaries (#1568)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.