Maintaining TUF

May 01, 2023 35 min Free

Description

The Update Framework (TUF) is a framework designed to protect against supply chain attacks in secure content delivery and updates. This talk, featuring core project members Joshua Lock and Lukas Pühringer, focuses on the maintenance of TUF. They will delve into the project's organization, including its specification, standardization process, and the growing number of implementations. The session will showcase diverse subproject needs by walking through the recent reference implementation rewrite and highlight various contribution opportunities within the TUF community, which is actively seeking individuals passionate about secure software supply chains.