Package dev.sigstore.tuf.model

Interface TimestampMeta

  • All Superinterfaces:
    TufMeta
    @TypeAdapters
@Immutable
public interface TimestampMeta
extends TufMeta
    To prevent an adversary from replaying an out-of-date signed metadata file whose signature has not yet expired, an automated process periodically signs a timestamped statement containing the hash of the snapshot file. Even though this timestamp key must be kept online, the risk posed to clients by the compromise of this key is minimal.