blob: b094cc13514060f61619c88bf2055f54ca522ec2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
# The Sigsum Project
Sigsum is a free and open source software project that brings transparency
logging to **sig**ned check**sum**s. The overall design is kept general
by not logging a more concrete data structure like TLS certificates.
- [x] Discoverability of signed checksums for the data of your choice
- [x] Centralised log operations but distributed trust assumptions
- [x] Minimalistic design that simplifies log operations and usage
Sigsum logging can be used to make a signer's key-usage transparent. For
example, malicious and unintended key-usage can be detected. Transparent
key-usage also facilitates verification of falsifiable claims.
Examples include:
- Everyone gets the same executable binaries
- A domain does not serve malicious javascript
- A list of key-value pairs is maintained with a certain policy
Please refer to the sigsum logging
[design document](https://git.sigsum.org/sigsum/tree/doc/design.md),
[API specification](https://git.sigsum.org/sigsum/tree/doc/api.md), and
[public prototype](https://git.sigsum.org/sigsum-log-go/tree/README.md)
to learn more. There is also an
[archive](https://git.sigsum.org/sigsum/tree/archive)
of meeting minutes and discuss
[pads](https://pad.sigsum.org).
All project repositories are located at
[git.sigsum.org](https://git.sigsum.org).
## Contact
### Chat
Chat with users and developers on IRC or Matrix. The rooms
are bridged so it does not matter which one you choose.
- IRC: \#sigsum @ [OFTC.net](https://oftc.net/)
- Matrix: [#sigsum:matrix.org](https://app.element.io/#/room/#sigsum:matrix.org)
There are open video/voice meeting on Tuesdays at 1200 UTC, in the
'sigsum' Jitsi room.
- Jitsi: [meet.sigsum.org/sigsum](https://meet.sigsum.org/sigsum)
### Email
Subscribe to the
[Sigsum-general mailing list](https://lists.sigsum.org/mailman3/hyperkitty/list/sigsum-general@lists.sigsum.org/)
by sending an email with 'subscribe' in the subject to
sigsum-general-join@lists.sigsum.org
or use the form at
[the list info page](https://lists.sigsum.org/mailman3/postorius/lists/sigsum-general.lists.sigsum.org/).
After being subsribed, you can provide feedback, report issues, and
submit patches by sending an email to the list, at
sigsum-general@lists.sigsum.org
## Sponsors
- [Mullvad VPN](https://mullvad.net/), financial sponsor
- [DFRI](https://www.dfri.se/), mailing list sponsor
|
