Verifying Software Signatures with TUF and Sigstore
CNCF [Cloud Native Computing Foundation] via YouTube
Learn AI, Data Science & Business — Earn Certificates That Get You Hired
Learn the Skills Netflix, Meta, and Capital One Actually Hire For
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk explains how to verify software signatures against trusted identities and how Sigstore, TUF, and in-toto can improve the security of software repositories and registries. It also discusses the limits of signing and how to design verification policies.
Syllabus
Not All That’s Signed Is Secure: Verify the Right Way with TUF and... Zachary Newman & Marina Moore
Taught by
CNCF [Cloud Native Computing Foundation]