search

ipfs-rust / blake-streams

Fast authenticated replicated streams
5 stars 1 forks source link

look into tuf #7

Open dvc94ch opened 2 years ago

dvc94ch commented 2 years ago

looks like some of the problems that signed streams have compared to content addressed streams are dealt with in the update framework.

dvc94ch commented 2 years ago

so the main takeaway from tuf is that we can simplify key rotation by having an offline key that is signs an online key. also if we do sparse streams or update in place streams we would need to version the signed heads. Currently we can tell which is more recent by comparing the offsets.