You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
small inconsistency with regards to root.json versions: 6.2.1. Writing consistent snapshots states:
an implementation must write both root.json and version_number.root.json because it is possible to download root metadata both with and without known version numbers.
It is not in fact documented that client could download root without a version (client workflow only downloads versioned roots). I can see how a Trust-On-First-Use (TOFU) client initialization could use this but that is not defined in the spec.
I guess either
TOFU initialization could be mentioned as a possibility (even if not recommended)
the requirement to offer unversioned root.json should not be there
The text was updated successfully, but these errors were encountered:
Uh oh!
There was an error while loading. Please reload this page.
small inconsistency with regards to root.json versions: 6.2.1. Writing consistent snapshots states:
It is not in fact documented that client could download root without a version (client workflow only downloads versioned roots). I can see how a Trust-On-First-Use (TOFU) client initialization could use this but that is not defined in the spec.
I guess either
The text was updated successfully, but these errors were encountered: