Tag
key-compromise
- Oct 25, 2026 Signed Repository Metadata and the Compromise-Resistant Update Protocol Why a signature on the artifact is not enough, how role-based metadata separates signing keys by function, and what the freshness and freeze defences cost in round trips. software engineering
- Apr 17, 2023 Threshold Roles and Rollback Protection in the Update Framework TUF treats a repository as four roles with separate keys and quorum thresholds. The design turns a compromised signing key into a bounded, detectable incident. security