diff --git a/tuf-spec.md b/tuf-spec.md index f58e9a9..38e0066 100644 --- a/tuf-spec.md +++ b/tuf-spec.md @@ -5,10 +5,10 @@ Status: LS Abstract: A framework for securing software update systems. Date: 2026-01-22 Editor: Justin Cappos, NYU -Editor: Trishank Karthik Kuppusamy, Datadog +Editor: Trishank Karthik Kuppusamy, Apple Editor: Joshua Lock, Verizon -Editor: Marina Moore, NYU -Editor: Lukas Pühringer, NYU +Editor: Marina Moore, Edera +Editor: Lukas Pühringer, Eclipse Repository: theupdateframework/specification Mailing List: https://groups.google.com/forum/?fromgroups#!forum/theupdateframework Indent: 2 @@ -16,13 +16,12 @@ Boilerplate: copyright no, conformance no Local Boilerplate: header yes Markup Shorthands: css no, markdown yes Metadata Include: This version off, Abstract off -Text Macro: VERSION 1.0.33 +Text Macro: VERSION 1.0.34 Note: We strive to make the specification easy to implement, so if you come across any inconsistencies or experience any difficulty, do let us know by -sending an email to our [mailing list]( - https://groups.google.com/forum/?fromgroups#!forum/theupdateframework), +messaging us on the [CNCF slack](https://communityinviter.com/apps/cloud-native/cncf) channel #tuf, or by reporting an issue in the [specification repo]( https://github.com/theupdateframework/specification/issues). @@ -750,10 +749,9 @@ The "signed" portion of root.json is as follows: KEYID represented in this key list and in other files, only one unique key has that KEYID. - : THRESHOLD - :: - An integer number of keys of that role whose signatures are required in - order to consider a file as being properly signed by that role. + As before the THRESHOLD must be a positive integer number of keys (>=1) of + that role whose signatures are required in order to consider a file as being + properly signed by that role.