The Update Framework (TUF)

[DemiMarie]

Cargo, like Cabal before it, should implement a version of The Update Framework. As with Cabal, this will initially involve only repository signatures, but will later involve end-to-end signing.

Cabal uses The Update Framework in production, so we know that this is doable.

[sfackler]

#4768

[alexcrichton]

Ah yes I think this is a more-or-less dupe of #4768, so I'm going to close in favor of that.

[tarcieri]

See also: rust-lang/crates.io#75

[DemiMarie]

Is anyone assigned to this issue?

…

On Thu, Jun 14, 2018, 4:41 PM Tony Arcieri ***@***.***> wrote: See also: rust-lang/crates.io#75 <rust-lang/crates.io#75> — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#5363 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AGGWB-BaJXSCe-B3d_wY5-MPpeVMd-f2ks5t8sqMgaJpZM4TVrBO> .