6 ms·
How this compares with https://github.com/theupdateframework/notary https://github.com/theupdateframework/notary?
by p932 6y ago
How this compares with https://github.com/theupdateframework/notary https://github.com/theupdateframework/notary?
- philips 6y agoNotary is a signing scheme from the publisher. It is an improvement over GPG signing + a better scheme for signaling to clients the next version to update. Asset Transparency doesn't require the publisher to be involved at all and can work on any URL on the internet that is publicly accessible. It also complementary to signing schemes. Here is the Asset Transparency CLI fetching and verifying the contents of a notary release for example: tl get https://github.com/theupdateframework/notary/releases/download/v0.6.1/notary-Linux-amd64 Or if you are curious hit the service’s lookup endpoint directly: curl http://beta-asset.transparencylog.net/lookup/github.com/theupdateframework/notary/releases/download/v0.6.1/notary-Linux-amd64
- trishankdatadog 6y agoPhilip is right: they are complementary: https://ssl.engineering.nyu.edu/blog/2020-02-03-transparent-logs https://ssl.engineering.nyu.edu/blog/2020-02-03-transparent-...