Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
Signed-off-by: Kim Altintop <kim@eagain.io>
|
|
Signed-off-by: Kim Altintop <kim@eagain.io>
|
|
Signed-off-by: Kim Altintop <kim@eagain.io>
|
|
BLAKE3 has a verified streaming mode (Bao), which allows variable chunk
sizes without altering the root hash. This means that a BLAKE3 hash can
serve as a long-term stable content address in location-independent
storage (as demonstrated by iroh).
Signed-off-by: Kim Altintop <kim@eagain.io>
|
|
- Missing "use" in README
- Rename IncompatibleSpecVersion to IncompatibleVersion
Signed-off-by: Kim Altintop <kim@eagain.io>
|
|
Signed-off-by: Kim Altintop <kim@eagain.io>
|
|
Replace threshold on identities with a roles dictionary, where the only
currently supported role is "root". Keys in the root role are eligible
for identity document updates.
This allows users to restrict identity edits to keys on secure storage,
while still permitting signatures from weaker protected keys for other
purposes.
Signed-off-by: Kim Altintop <kim@eagain.io>
|
|
Signed-off-by: Kim Altintop <kim@eagain.io>
|
|
It turns out to be preferable to be able to break one type without
affecting the other.
So instead of the global SpecVersion, use a separate FmtVersion for each
type. For compatibility, keep supporting spec_version fields (until next
major bump of the respective types' version).
Signed-off-by: Kim Altintop <kim@eagain.io>
|
|
Signed-off-by: Kim Altintop <kim@eagain.io>
|
|
Signed-off-by: Kim Altintop <kim@eagain.io>
|
|
Squashed commit of all the exploration history. Development starts here.
Signed-off-by: Kim Altintop <kim@eagain.io>
|