Dear all, We just published a blog post about the Paris summit on our lab website: https://ssl.engineering.nyu.edu/blog/2019-01-18-in-toto-paris
It is both a recap of the event, and a high-level introduction to how we use in-toto to communicate and verify rebuild attestations (in Debian). And it is also an invitation to get involved. We'd appreciate any help on the following items: - Package our relevant software for Debian [1], [2], [3] - Deploy independent rebuilders [4] - Explore ways of integration for other distros/projects If you're interested please reach out to me/us! Best, Lukas ps: I also wanted to say that I had a really good time at the summit. Thanks for all the hard work and for being a warm and welcoming community! [1] https://github.com/in-toto/in-toto [2] https://github.com/in-toto/apt-transport-in-toto [3] https://github.com/secure-systems-lab/securesystemslib [4] https://salsa.debian.org/reproducible-builds/debian-rebuilder-setup -- [email protected] PGP fingerprint: 8BA6 9B87 D43B E294 F23E 8120 89A2 AD3C 07D9 62E8
signature.asc
Description: OpenPGP digital signature
_______________________________________________ [email protected] mailing list To change your subscription options, visit https://lists.reproducible-builds.org/listinfo/rb-general. To unsubscribe, send an email to [email protected].
