theupdateframework / theupdateframework/python-tuf
Can TUF be used to update offline systems, disconnected from the Internet?
@trishankatdatadog is already working on this.
Since Dec 17, 2019.
- Dominant language
- Python
- Stars
- 1.7k
- Forks
- 304
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 17
Description
Many of the most important computing systems, such as systems that manage root keys, or tabulate votes in elections, or secure other highly sensitive data, are kept offline and never connected to the Internet.
I'm hoping that TUF could be used for such computers, given some sort of sneakernet polling mechanism and reliable source of the time-of day (e.g. via GPS). But I don't see any discussion of that.
Given that TUF itself relies on having secure systems to manage TUF root keys, it would be helpful to clarify this.
Has it been done? Are there any caveats to keep in mind?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.