From 0f40d0c03981a309fc6ad48dcda26c93f2dd64d9 Mon Sep 17 00:00:00 2001 From: Joshua Lock Date: Thu, 27 Feb 2020 12:10:31 +0000 Subject: [PATCH] Update docs/METADATA.md to reflect recent spec change The specification was updated in PR #40 to remove root.json from snapshot.json Signed-off-by: Joshua Lock --- docs/METADATA.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/METADATA.md b/docs/METADATA.md index 8bd6c17cd3..2b381bec5d 100644 --- a/docs/METADATA.md +++ b/docs/METADATA.md @@ -64,7 +64,7 @@ of delegated Targets metadata and [example](https://raw.githubusercontent.com/th Signed by: Snapshot role. -The snapshot.json metadata file lists hashes and sizes of all metadata files other than timestamp.json. This file ensures that clients will see a consistent view of the files on the repository. That is, metadata files (and thus target file) that existed on the repository at different times cannot be combined and presented to clients by an attacker. +The snapshot.json metadata file lists the version, and optionally the file hashes and sizes, of all metadata files other than root.json and timestamp.json. This file ensures that clients will see a consistent view of the files on the repository. That is, metadata files (and thus target file) that existed on the repository at different times cannot be combined and presented to clients by an attacker. ​See [example](https://raw.githubusercontent.com/theupdateframework/tuf/develop/tests/repository_data/repository/metadata/snapshot.json) of Snapshot metadata.