Skip to content

Latest commit

 

History

History
80 lines (49 loc) · 2.91 KB

ROADMAP.md

File metadata and controls

80 lines (49 loc) · 2.91 KB

ROADMAP

This is the roadmap for the project.

Release schedule

A new release of the project is expected every 3 months. The release cycle, upcoming tasks, and any stated goals are subject to change.

Releases are available both on GitHub and on PyPI. The GitHub listing includes release notes.

Latest release

Please consult the repository's releases page on GitHub for information about the latest releases.

As of the last editing of this document, the latest release was: Pre-release v0.11.2.dev3, January 10, 2019.

A number of older releases were packaged by Vladimir V Diaz:

  • Vladimir Diaz <vladimir.v.diaz@gmail.com, @vladimir-v-diaz>
  • PGP fingerprint: 3E87 BB33 9378 BC7B 3DD0 E5B2 5DEE 9B97 B0E2 289A

Tasks for upcoming releases

In no particular order...

  • Provide protection against a class of slow retrieval attacks using long inter-byte delays, without sacrificing the use of clean, modern, production-quality HTTP libraries (requests currently).

  • Support ASN.1 metadata: loading, writing, signing, and verification.

  • CII Best Practices badge.

    • silver badge
    • gold badge (currently at 74%)
  • Support graph of delegations (requires refactor of API and client code).

  • TAP 3: Multi-role delegations.

  • TAP 4: Multiple repository consensus on entrusted targets.

  • TAP 5: Setting URLs for roles in the Root metadata file.

  • TAP 8: Key rotation and explicit self-revocation.

  • CLI tool and quickstart guide.

  • Improve update speed.

  • Fully support Windows.

  • Generalize metadata format in specification.

  • Support post quantum resilient crypto.

  • Resolve TODOs in the code.

  • Support Python's multilingual internationalization and localization services.

  • Improved regression and attack testing.

  • Automated tutorial and instructions testing to enforce doc maintenance.

  • Continue resolution of outstanding tickets on the issue tracker.

  • Generalize encrypted key files. Allow different forms of encryption, key derivation functions, etc.

  • Speed up loading and saving of metadata. Support option to save metadata to memory.