-
Notifications
You must be signed in to change notification settings - Fork 512
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Sajay Antony <[email protected]>
- Loading branch information
1 parent
887a007
commit 5a4288e
Showing
1 changed file
with
11 additions
and
15 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,30 +1,26 @@ | ||
<img src="docs/images/notary-blk.svg" alt="Notary" width="400px"/> | ||
|
||
[![GoDoc](https://godoc.org/github.com/theupdateframework/notary?status.svg)](https://godoc.org/github.com/theupdateframework/notary) | ||
[![Circle CI](https://circleci.com/gh/theupdateframework/notary/tree/master.svg?style=shield)](https://circleci.com/gh/theupdateframework/notary/tree/master) [![CodeCov](https://codecov.io/github/theupdateframework/notary/coverage.svg?branch=master)](https://codecov.io/github/theupdateframework/notary) [![GoReportCard](https://goreportcard.com/badge/theupdateframework/notary)](https://goreportcard.com/report/github.com/theupdateframework/notary) | ||
[![FOSSA Status](https://app.fossa.io/api/projects/git%2Bgithub.com%2Ftheupdateframework%2Fnotary.svg?type=shield)](https://app.fossa.io/projects/git%2Bgithub.com%2Ftheupdateframework%2Fnotary?ref=badge_shield) | ||
|
||
# Notice | ||
|
||
The Notary project has officially been accepted in to the Cloud Native Computing Foundation (CNCF). | ||
It has moved to https://github.com/theupdateframework/notary. Any downstream consumers should update | ||
their Go imports to use this new location, which will be the canonical location going forward. | ||
|
||
We have moved the repo in GitHub, which will allow existing importers to continue using the old | ||
location via GitHub's redirect. | ||
This repository serves as an implementaiton of | ||
*[The Update Framework specficaitions](https://github.com/theupdateframework/specification)* | ||
and all references to "Notary" in this repository refer to the implementation of the client | ||
and server aligning with the [TUF](https://github.com/theupdateframework/specification) specification. | ||
|
||
# Overview | ||
|
||
The Notary project comprises a [server](cmd/notary-server) and a [client](cmd/notary) for running and interacting | ||
This repository comprises of a [server](cmd/notary-server) and a [client](cmd/notary) for running and interacting | ||
with trusted collections. See the [service architecture](docs/service_architecture.md) documentation | ||
for more information. | ||
|
||
Notary aims to make the internet more secure by making it easy for people to | ||
The aim is to make the internet more secure by making it easy for people to | ||
publish and verify content. We often rely on TLS to secure our communications | ||
with a web server, which is inherently flawed, as any compromise of the server | ||
enables malicious content to be substituted for the legitimate content. | ||
|
||
With Notary, publishers can sign their content offline using keys kept highly | ||
Publishers can sign their content offline using keys kept highly | ||
secure. Once the publisher is ready to make the content available, they can | ||
push their signed trusted collection to a Notary Server. | ||
|
||
|
@@ -35,7 +31,7 @@ received content. | |
|
||
## Goals | ||
|
||
Notary is based on [The Update Framework](https://www.theupdateframework.com/), a secure general design for the problem of software distribution and updates. By using TUF, Notary achieves a number of key advantages: | ||
The notary client and server is based on [The Update Framework](https://www.theupdateframework.com/), a secure general design for the problem of software distribution and updates. By using TUF, Notary achieves a number of key advantages: | ||
|
||
* **Survivable Key Compromise**: Content publishers must manage keys in order to sign their content. Signing keys may be compromised or lost so systems must be designed in order to be flexible and recoverable in the case of key compromise. TUF's notion of key roles is utilized to separate responsibilities across a hierarchy of keys such that loss of any particular key (except the root role) by itself is not fatal to the security of the system. | ||
* **Freshness Guarantees**: Replay attacks are a common problem in designing secure systems, where previously valid payloads are replayed to trick another system. The same problem exists in the software update systems, where old signed can be presented as the most recent. Notary makes use of timestamping on publishing so that consumers can know that they are receiving the most up to date content. This is particularly important when dealing with software update where old vulnerable versions could be used to attack users. | ||
|
@@ -48,18 +44,18 @@ Notary is based on [The Update Framework](https://www.theupdateframework.com/), | |
|
||
Any security vulnerabilities can be reported to [email protected]. | ||
|
||
See Notary's [service architecture docs](docs/service_architecture.md#threat-model) for more information about our threat model, which details the varying survivability and severities for key compromise as well as mitigations. | ||
See [service architecture docs](docs/service_architecture.md#threat-model) for more information about our threat model, which details the varying survivability and severities for key compromise as well as mitigations. | ||
|
||
### Security Audits | ||
|
||
Notary has had two public security audits: | ||
Below are the two public security audits: | ||
|
||
* [August 7, 2018 by Cure53](docs/resources/cure53_tuf_notary_audit_2018_08_07.pdf) covering TUF and Notary | ||
* [July 31, 2015 by NCC](docs/resources/ncc_docker_notary_audit_2015_07_31.pdf) covering Notary | ||
|
||
# Getting started with the Notary CLI | ||
|
||
Get the Notary Client CLI binary from [the official releases page](https://github.com/theupdateframework/notary/releases) or you can [build one yourself](#building-notary). | ||
Get the notary client CLI binary from [the official releases page](https://github.com/theupdateframework/notary/releases) or you can [build one yourself](#building-notary). | ||
The version of the Notary server and signer should be greater than or equal to Notary CLI's version to ensure feature compatibility (ex: CLI version 0.2, server/signer version >= 0.2), and all official releases are associated with GitHub tags. | ||
|
||
To use the Notary CLI with Docker hub images, have a look at Notary's | ||
|