From 838e268e6563f9d361497ce7cab82545d69cff66 Mon Sep 17 00:00:00 2001 From: Rasmus Dahlberg Date: Wed, 17 Mar 2021 13:15:08 +0100 Subject: defined artifact --- README.md | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 4f4692e..dfea8b9 100644 --- a/README.md +++ b/README.md @@ -1,11 +1,12 @@ # System Transparency Front-End (STFE) -STFE is a Trillian personality that allows you to transparency log signed -artifact checksums. A client consuming artifacts may enforce that such logging -takes place by mandating that there is a public trace of each artifact before -even considering to trust it. We refer to such a trace as a signed checksum -entry: it is composed of +STFE is a Trillian personality that allows you to log signed artifact checksums. +A client consuming artifacts (such as a browser update, a Debian package, a document, +or more generally anything opaque) may enforce that such logging takes place by +mandating that there is a public trace of each artifact before even considering +to trust it. We refer to such a trace as a signed checksum entry: it is +composed of an arbitrary identifier like `stfe_client v0.0.1`, - an artifact checksum, + a checksum, a signature, and a namespace that is derived from the public verification key. Tracking checksums as opposed to full-on artifacts makes it less costly to -- cgit v1.2.3