Skip to content

docs: clarify 'How does TUF secure updates?' for first-time readers - #165

Draft
harshgounder wants to merge 1 commit into
theupdateframework:mainfrom
harshgounder:clarify-overview-secure-updates
Draft

docs: clarify 'How does TUF secure updates?' for first-time readers#165
harshgounder wants to merge 1 commit into
theupdateframework:mainfrom
harshgounder:clarify-overview-secure-updates

Conversation

@harshgounder

Copy link
Copy Markdown

Closes #164 (docs clarity, no code change).

Restructures the dense single paragraph into four concrete questions the metadata chain answers:

  1. Who is allowed to sign? (root metadata lists trusted keys)
  2. What is the current version? (version numbers prevent rollback)
  3. What was signed? (hashes bind files to metadata)
  4. Is it still valid? (timestamps + expiry reject stale updates)

No behavioral/content claims changed — purely structural rewrite of the existing prose, preserving all links.

First-time contributor here. I noticed the contribution policy (#159) asks first-timers to work good-first-issue-labeled issues, but none are currently open. Happy to adjust scope per maintainer guidance.

Restructures the dense paragraph into four concrete questions the metadata
chain answers (trusted keys, version, hashes, expiry), addressing theupdateframework#164.

Signed-off-by: Harsh Gounder <harshgounder@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Clarify “How does TUF secure updates?” for new readers.

1 participant