Skip to content

Commit 686b04f

Browse files
committed
Make delegated targets freeze attack consistent
Other freeze attack checks state that the listed timestamp must be higher than the fixed update start time. Use the same wording in the delegated targets freeze attack check. Signed-off-by: Marina Moore <[email protected]>
1 parent 3722bf3 commit 686b04f

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

tuf-spec.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -1520,9 +1520,9 @@ it in the next step.
15201520
DELEGATOR metadata file. If the new DELEGATEE metadata file is not signed
15211521
as required, abort the update cycle, and report the failure.
15221522

1523-
6. **Check for a freeze attack.** The latest known time
1524-
should be lower than the expiration timestamp in the new DELEGATEE
1525-
metadata file. If so, the new DELEGATEE file becomes the trusted DELEGATEE
1523+
6. **Check for a freeze attack.** The expiration timestamp in new
1524+
DELEGATEE metadata file MUST be higher than the fixed update start time.
1525+
If so, the new DELEGATEE file becomes the trusted DELEGATEE
15261526
file. If the new DELEGATEE metadata file is expired, abort the update
15271527
cycle, and report the potential freeze attack.
15281528

0 commit comments

Comments
 (0)