Securing Content Distribution with RSTUF, an Incubating OpenSSF Project

Explore a conference talk on securing content distribution using RSTUF, an incubating OpenSSF project. Learn about The Update Framework (TUF) and its challenges in integrating with existing repositories. Discover how Repository Service for TUF (RSTUF) aims to simplify TUF adoption for content repositories. Gain insights into RSTUF's recent promotion to "incubating" status and its latest developments. Examine real-world use cases, including PyPI and RubyGens' adoption of RSTUF for securing package repositories, RSTUF's application in private repositories, and Archivista's use of RSTUF for securing in-toto attestation storage.