You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
It is probably not helpful for Timestamp to list Snapshot's hash #28
Timestamp and Root are likely to be the two most-downloaded files on a repository. Currently, Timestamp lists information for Snapshot in a different way than Snapshot lists information for Targets and delegated targets files: timestamp lists the hash of snapshot in addition to the version number of snapshot. It is not clear that this is actually useful.
The costs to this are a few:
It adds size to the timestamp role file (one hash where timestamp would otherwise not contain hashes)
It makes the timestamp role file a little harder to read and understand.
It makes conceptually reconciling timestamp and snapshot definitions a bit harder for implementers / new folks.
It requires a bulkier and less intuitive programmatic representation (in formats.py and tuf_metadata_definitions.asn1).
Activity