theupdateframework / theupdateframework/python-tuf
Can TUF be used to update offline systems, disconnected from the Internet?
@trishankatdatadog arbeitet bereits daran.
Seit 17.12.2019.
- Vorherrschende Sprache
- Python
- Sterne
- 1.7k
- Forks
- 304
- Ø Merge
- 1 T. 2 Std.
- Gemergte PRs (30 T.)
- 17
Beschreibung
Many of the most important computing systems, such as systems that manage root keys, or tabulate votes in elections, or secure other highly sensitive data, are kept offline and never connected to the Internet.
I'm hoping that TUF could be used for such computers, given some sort of sneakernet polling mechanism and reliable source of the time-of day (e.g. via GPS). But I don't see any discussion of that.
Given that TUF itself relies on having secure systems to manage TUF root keys, it would be helpful to clarify this.
Has it been done? Are there any caveats to keep in mind?
Beitragsleitfaden
Erste Schritte
- Lies das ganze Issue und danach den Beitragsleitfaden des Projekts.
- Schreib ins Issue, dass du es übernimmst — das erspart doppelte Arbeit.
- Forke das Repository und arbeite in einem Branch.
- Öffne einen Pull Request, der die Issue-Nummer nennt.
Bewertung
Dieses Issue wurde noch nicht bewertet.