-
Notifications
You must be signed in to change notification settings - Fork 18
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Re-think use of "Backwards Compatibility" and replace with something more appropriate #14
Comments
Not to mention that we should more seriously think about backwards-compatibility in the first place. As it is, the spec is not at all backwards-compatible with older clients who may not have the luxury to update, and older repositories who may not have the luxury to maintain two different, incompatible versions of metadata. |
Hi Trishank. You bring up a very good point. After further thought, I don't think we need the "backwards compatibility mode" at all. It doesn't fill any known need, and we can always add such a feature in the future if/when it's needed. I'll send out a PR to remove it. Originally, the intention of this mode was for two use cases:
Thus, the feature doesn't seem to serve any real purpose. Removing it will reduce complexity. |
I think I agree, but let me think about this a bit more with a demo. |
This mode allowed for the old signature protocol to be represented in the new data structure. However, there was no known use case for this. True backwards compatibility requires supporting both protocol *and* data structure. Thus, backwards compatibility can be handled at the application (TUF or in-toto). Fixes secure-systems-lab#14.
This mode allowed for the old signature protocol to be represented in the new data structure. However, there was no known use case for this. True backwards compatibility requires supporting both protocol *and* data structure. Thus, backwards compatibility can be handled at the application (TUF or in-toto). Fixes secure-systems-lab#14.
@trishankatdatadog Bump, do you have any thoughts? If this makes sense, we can likely merge #19... |
@trishankatdatadog noted in #13 (comment) that the term "backwards compatible" could be misleading. "Legacy" and "Deprecated" were suggested as alternatives, and @MarkLodato said this replacement could occur in a standalone PR.
The text was updated successfully, but these errors were encountered: