Sitemap
Square Corner Blog

Buying and selling sound like simple things - and they should be. Somewhere along the way, they got complicated. At Square, we're working hard to make commerce easy for everyone.

Follow publication

Securing RubyGems with TUF, Part 1

6 min readDec 6, 2013

--

Securing A File

.
├── metadata
│ └── targets.txt
└── my-super-file.txt
{
"signature": { "keyid": "offline", "sig": "196b99cd975c8ab9dc70" },
"signed": {
"files": {
"my-super-file.txt": "cb18ca7e4084820d53dc444b97c253b3"
}
}
}

Online Operation

Mix And Match

.
├── metadata
│ ├── targets
│ │ ├── recent.txt
│ │ └── verified.txt
│ └── targets.txt
├── my-new-file.txt
└── my-super-file.txt
# targets.txt
{
"signature": { "keyid": "offline", "sig": "be49f3a66314cbaf" },
"signed": {
"public_keys": { "online": "7b1fd6094c6b87c196f1ff423527da38" },
"delegations": [
{ "name": "verified", "public_key": "offline" },
{ "name": "recent", "public_key": "online" }
]
}
}
# targets/verified.txt
{
"signature": { "keyid": "offline", "sig": "196b99cd975c8ab9" },
"signed": {
"files": {
"my-super-file.txt": "cb18ca7e4084820d53dc444b97c253b3"
}
}
}
# targets/recent.txt
{
"signature": { "keyid": "online", "sig": "305781c28a40f8639" },
"signed": {
"files": {
"my-new-file.txt": "a5cde2fafbeb6603096e064def328421"
}
}
}

--

--

Square Corner Blog
Square Corner Blog

Published in Square Corner Blog

Buying and selling sound like simple things - and they should be. Somewhere along the way, they got complicated. At Square, we're working hard to make commerce easy for everyone.

Square Engineering
Square Engineering

Written by Square Engineering

The official account for @Square Engineering.

No responses yet