Import academics papers from tuf project #159 #160
Closed
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This change is part is of tuf's commit: Move all files up one directory from 'src/'. Author: vladdd <[email protected]> Origin: theupdateframework/python-tuf@abf0349 Relate-to: theupdateframework/python-tuf#1380 URL: theupdateframework#159 Forwarded: theupdateframework#160 Signed-off-by: Philippe Coval <[email protected]>
This change is part is of tuf's commit: Refactored test_replay_attack.py, changes to test_system_setup.py and renamed one of the docs. Author: Kon <[email protected]> Origin: theupdateframework/python-tuf@bb059cd Relate-to: theupdateframework/python-tuf#1380 URL theupdateframework#159 Forwarded: theupdateframework#160 Signed-off-by: Philippe Coval <[email protected]>
rzr
pushed a commit
to rzr/specification
that referenced
this pull request
May 10, 2021
…8.pdf This change is part is of tuf's commit: Removed doc duplicate and an obsolete test module. Author: Kon <[email protected]> Origin: theupdateframework/python-tuf@bb059cd Relate-to: theupdateframework/python-tuf#1380 URL: theupdateframework#159 Forwarded: theupdateframework#160 Signed-off-by: Philippe Coval <[email protected]>
rzr
force-pushed
the
sandbox/rzr/review/master
branch
from
4755382 to
f8a7334
Compare
rzr
pushed a commit
to rzr/specification
that referenced
this pull request
May 10, 2021
This change is part is of tuf's commit: Add Diplomat paper Author: vladdd <[email protected]> Origin: theupdateframework/python-tuf@e943048 Relate-to: theupdateframework/python-tuf#1380 URL: theupdateframework#159 Forwarded: theupdateframework#160 Signed-off-by: Philippe Coval <[email protected]>
rzr
pushed a commit
to rzr/specification
that referenced
this pull request
May 10, 2021
This change is part is of tuf's commit: Add Mercury paper and entry in README.rst Author: vladdd <[email protected]> Origin: theupdateframework/python-tuf@fb9aa3e Relate-to: theupdateframework/python-tuf#1380 URL: theupdateframework#159 Forwarded: theupdateframework#160 Signed-off-by: Philippe Coval <[email protected]>
…8.pdf This change is part is of tuf's commit: Removed doc duplicate and an obsolete test module. Author: Kon <[email protected]> Origin: theupdateframework/python-tuf@e7c4352 Relate-to: theupdateframework/python-tuf#1380 URL: theupdateframework#159 Forwarded: theupdateframework#160 Signed-off-by: Philippe Coval <[email protected]>
This change is part is of tuf's commit: Add Diplomat paper Author: vladdd <[email protected]> Origin: theupdateframework/python-tuf@e943048 Relate-to: theupdateframework/python-tuf#1380 URL: theupdateframework#159 Forwarded: theupdateframework#160 Signed-off-by: Philippe Coval <[email protected]>
This change is part is of tuf's commit: Add Mercury paper and entry in README.rst Author: vladdd <[email protected]> Origin: theupdateframework/python-tuf@fb9aa3e Relate-to: theupdateframework/python-tuf#1380 URL: theupdateframework#159 Forwarded: theupdateframework#160 Signed-off-by: Philippe Coval <[email protected]>
rzr
force-pushed
the
sandbox/rzr/review/master
branch
from
f8a7334 to
ecc2fef
Compare
3 tasks
|
Thanks for taking the initiative here @rzr. We already have the papers included in the website repository here https://github.com/theupdateframework/theupdateframework.io/tree/master/static/papers I like the idea of using this repository for "source" rather than "built" outputs and just having the PDFs of the papers exist on the website. Would be curious to hear from the other maintainers, though cc @JustinCappos @mnm678 @trishankatdatadog |
|
Update: well files are already located at: I am not sure it makes sense to duplicate them here, that said sources (latex) of those papers can be hosted here for preservation concerns. I am planning to close this ticket unless someone has something more to say about it. |
rzr
added a commit
to CrossStream/tuf
that referenced
this pull request
May 10, 2021
Duplication is not needed since files are hosted in website project: https://github.com/theupdateframework/theupdateframework.io/tree/master/static/papers Those generated files are not explicitly under Apache-2.0 licence and AFAIK they can not be regenerated from missing (latex?) sources. To avoid licence mixup. It would help to have those files published elsewhere. Meanwhile online (Github) links are used. Debian had to repack the source package to make tarball compliant with DFSG despite debian tools are known to be trustworthy, this extra step would add weakess in the chain of trust Cleanup done upstream would make distribution safer. Bug: theupdateframework#1161 Bug-Debian: https://salsa.debian.org/python-team/packages/tuf/-/merge_requests/11 Relate-to: theupdateframework#263 (comment) Forwarded: theupdateframework#1380 Relate-to: theupdateframework/specification#160 Signed-off-by: Philippe Coval <[email protected]>
|
I agree that referring to the paper pdfs on the website makes sense. It might be nice to include the latex source here, but I worry that that would be scope creep for this repo (~10 new source files/paper, latex backwards compatibility questions, etc). If there's interest maybe we can host those in their own repository. |
|
Thanks for the attention to detail here @rzr . As discussed, let's leave the website as the canonical place for these. |
|
Fine for me, but please also check |
trishankatdatadog
pushed a commit
to theupdateframework/python-tuf
that referenced
this pull request
May 28, 2021
Duplication is not needed since files are hosted in website project: https://github.com/theupdateframework/theupdateframework.io/tree/master/static/papers Those generated files are not explicitly under Apache-2.0 licence and AFAIK they can not be regenerated from missing (latex?) sources. To avoid licence mixup. It would help to have those files published elsewhere. Meanwhile online (Github) links are used. Debian had to repack the source package to make tarball compliant with DFSG despite debian tools are known to be trustworthy, this extra step would add weakess in the chain of trust Cleanup done upstream would make distribution safer. Bug: #1161 Bug-Debian: https://salsa.debian.org/python-team/packages/tuf/-/merge_requests/11 Relate-to: #263 (comment) Forwarded: #1380 Relate-to: theupdateframework/specification#160 Signed-off-by: Philippe Coval <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
I filtered "git log docs/papers" from tuf project to include only pdf files.
Attribution is preserved and origin tracked,
I can add digests (SHA256?) if needed
URL: #159
Relate-to: theupdateframework/python-tuf#1380
Origin: theupdateframework/python-tuf@fb9aa3e
Origin: theupdateframework/python-tuf@e943048
Origin: theupdateframework/python-tuf@e7c4352
Origin: theupdateframework/python-tuf@bb059cd
Origin: theupdateframework/python-tuf@abf0349
Cc: <@Vladdd>
Cc: <@akonst>
Cc: <@jku>
Cc: <@trishankatdatadog>
Cc: <@joshuagl>