Code

TAP for TUF developer key management#141

Code

Merged

mnm678 merged 33 commits intotheupdateframework:mastertheupdateframework/taps:masterfrom mnm678:fulcio-tapmnm678/taps:fulcio-tapCopy head branch name to clipboardFeb 7, 2023

+137

Commits

Commits on Jul 27, 2021

• Add first draft of Fulcio TAP

  Show description for 4b8ee68
  mnm678

  committed
  4b8ee68

Commits on Aug 12, 2021

• [Fulcio TAP] Minor clarifications and corrections

  Show description for 7db2f6d
  mnm678

  committed
  7db2f6d

Commits on Aug 19, 2021

• [Fulcio TAP] Add links and clarifications

  Show description for 57f3476
  mnm678

  committed
  57f3476

Commits on Aug 31, 2021

• Apply suggestions from code review

  Show description for a509f6d
  

  mnm678

  and

  axelsimon

  authored
  a509f6d

• [Fulcio TAP] Generalize email to OIDC identity

  Show description for 5480134
  mnm678

  committed
  5480134

Commits on Sep 10, 2021

• Add explicit recomendation to use auditors for the TL

  Show description for c31cc6d
  mnm678

  committed
  c31cc6d

• Add OIDC compromise to security analysis

  Show description for 07fc229
  mnm678

  committed
  07fc229

Commits on Nov 29, 2021

• Clarify use of multi-role delegations

  Show description for 22c70e7
  mnm678

  committed
  22c70e7

• Apply suggestions from code review

  Show description for 5bbab5d
  

  mnm678

  and

  axelsimon

  authored
  5bbab5d

• capitalize shoulds and musts

  Show description for 3f3a67a
  mnm678

  committed
  3f3a67a

Commits on Nov 30, 2021

• Update candidate-fulcio-tap.md

  Show description for 1cb0ba6
  

  mnm678

  and

  axelsimon

  authored
  1cb0ba6

Commits on Dec 16, 2021

• [Fulcio TAP] Add link to augmented reference implementation

  Show description for f6f9312
  mnm678

  committed
  f6f9312

Commits on Jan 10, 2022

• [fulcio TAP] clarify auditor signatures and revocation

  Show description for 61f2cc9
  mnm678

  committed
  61f2cc9

Commits on Mar 22, 2022

• Add clarifications about verification

  Show description for e8e6111
  mnm678

  committed
  e8e6111

Commits on Mar 30, 2022

• Move Fulcio root cert to delegating metadata

  Show description for c648977
  mnm678

  committed
  c648977

• Add detail about verifying with Rekor

  Show description for cbf1e06
  mnm678

  committed
  cbf1e06

• Apply suggestions from code review

  Show description for cc4d9a4
  

  mnm678

  and

  trishankatdatadog

  authored
  cc4d9a4

Commits on Apr 28, 2022

• client check SHOULD -> MAY

  Show description for a680f56
  mnm678

  committed
  a680f56

Commits on Jun 24, 2022

• Clarify when Fulcio certs should be valid

  Show description for eb50378
  mnm678

  committed
  eb50378

Commits on Jul 26, 2022

• [Fulcio TAP] Remove Rekor requirement

  Show description for 4910aa0
  mnm678

  committed
  4910aa0

Commits on Jul 28, 2022

• [Fulcio TAP] Update Fulcio details from code review

  Show description for f8f252d
  mnm678

  committed
  f8f252d

Commits on Nov 1, 2022

• Clarify fulcio certificates

  Show description for 4975dc5
  mnm678

  committed
  4975dc5

Commits on Nov 3, 2022

• [Fulcio TAP] Simplify the explanation of signing and verifying

  Show description for 9e8dbb3
  mnm678

  committed
  9e8dbb3

• [Fulcio TAP] Update signing and verification

  Show description for 50564bd
  mnm678

  committed
  50564bd

Commits on Nov 4, 2022

• Apply suggestions from code review

  Show description for 7b315fb
  

  mnm678

  and

  asraa

  authored
  7b315fb

• Clarify use of single Fulcio instance

  Show description for ec67d7d
  mnm678

  committed
  ec67d7d

• add in the Fulcio CT log

  Show description for 9893ba1
  mnm678

  committed
  9893ba1

Commits on Jan 13, 2023

• Add link to threat model doc

  Show description for 13c5266
  mnm678

  committed
  13c5266

Commits on Jan 17, 2023

• [Fulcio TAP] minor clarifications

  Show description for d7f086e
  mnm678

  committed
  d7f086e

Commits on Jan 27, 2023

• formatting fixes and typos

  Show description for 033e544
  mnm678

  committed
  033e544

• Clarifications from review

  Show description for 8dda4e2
  mnm678

  committed
  8dda4e2

Commits on Feb 2, 2023

• Apply suggestions from code review

  Show description for 98f5d0f
  

  mnm678

  and

  lukpueh

  authored
  98f5d0f

• clarifications based on code review

  Show description for 8d60a51
  mnm678

  committed
  8d60a51