search

sigstore / rekor

Software Supply Chain Transparency Log
https://sigstore.dev
Apache License 2.0
883 stars 163 forks source link

New Timestamp Format #315

Closed lukehinds closed 2 years ago

lukehinds commented 3 years ago

Issue to track new timestamping efforts

dlorenc commented 3 years ago

Let's use this issue to track the new timestamp format @asraa is working on!

asraa commented 3 years ago

Hi!

So for context, originally I hashed out and was working on a TimestampNote inspired by SignedNote that I was generalizing from Bob's impl of the SignedCheckpoint. The TimestampNote would follow the roughtime protocol and include a blind, radius, etc.

However, I think we may as well use Roughtime structs following https://github.com/cloudflare/roughtime so that when Rekor is fully production and we have a time source locked down, we would be ready to formally integrate it into the ecosystem and add a PR here https://github.com/cloudflare/roughtime/tree/1fe56bcbcfd4dd1ed52614ccc73a29c9b062275d#ecosystem-guidelines

haydentherapper commented 2 years ago

There are newer issues, closing as outdated