Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CNCF [Cloud Native Computing Foundation]

Verifying Software Signatures with TUF and Sigstore

CNCF [Cloud Native Computing Foundation] via YouTube

Overview

Explore the critical aspects of software security and signature verification in this informative conference talk. Delve into the common misconceptions surrounding software signing and learn why verification is crucial for ensuring true security. Discover how to properly verify software signatures and identify the right signers. Gain insights into utilizing CNCF projects like The Update Framework (TUF), in-toto, and Sigstore to enhance security for open source package repositories and internal container registries. Understand the capabilities and limitations of software signing, and learn to design effective verification policies for your projects or organizations. Explore how open source software repositories are implementing these techniques to guarantee the authenticity of downloaded code.

Syllabus

Not All That’s Signed Is Secure: Verify the Right Way with TUF and... Zachary Newman & Marina Moore

Taught by

CNCF [Cloud Native Computing Foundation]

Reviews

Start your review of Verifying Software Signatures with TUF and Sigstore

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.