Skip to content
Commit b71d8590 authored by Michael Schroeder's avatar Michael Schroeder Committed by Stephan Kulow
Browse files

[backend] also send snapshot data to notary

Before this commit we relied on the notary generating a snapshot
for us. This is a bit problematic, as we use the same sign keys for
multiple notary repositories. Thus is was possible to replace the
targets section of a repository with a targets section of a
different repository that uses the same sign key.

We now calculate and sign the snapshot, thereby binding the
targets section data to a specific root.
parent 42b8c0ca
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment