Had to rewrite big chunks of this because the data I was passing was not the right kind - in particular, I was using TUF's in-memory representation of metadata, but TUF immediately validates and strips off the signatures, so that couldn't work. I've decided instead to distribute an archive of metadata for the full verification Secondary clients.
Had to rewrite big chunks of this because the data I was passing was not the right kind - in particular, I was using TUF's in-memory representation of metadata, but TUF immediately validates and strips off the signatures, so that couldn't work. I've decided instead to distribute an archive of metadata for the full verification Secondary clients.