diff options
| author | Katie Hockman <katie@golang.org> | 2019-03-05 14:50:04 -0500 |
|---|---|---|
| committer | Katie Hockman <katie@golang.org> | 2019-03-06 23:19:14 +0000 |
| commit | cf1692eb69ce2f7bc1133f7a9bda5fe3386a299b (patch) | |
| tree | 741a0f78c8616eab63b61ab9bedea59e95f0dea7 | |
| parent | 138c158a23e90537fb7e147b7eafdfcea69d272c (diff) | |
| download | go-x-proposal-cf1692eb69ce2f7bc1133f7a9bda5fe3386a299b.tar.xz | |
design/25530-notary: clarify "data" in Notary Server
Change-Id: I690610142e114f292ff668c7b856ef8bf04fceca
Reviewed-on: https://go-review.googlesource.com/c/proposal/+/165457
Reviewed-by: Russ Cox <rsc@golang.org>
| -rw-r--r-- | design/25530-notary.md | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/design/25530-notary.md b/design/25530-notary.md index dd17f14..fdf3c3b 100644 --- a/design/25530-notary.md +++ b/design/25530-notary.md @@ -177,12 +177,13 @@ The Go notary will run at `https://notary.golang.org/` and serve the following e - `/latest` will serve a signed tree size and hash for the latest log. - `/lookup/M@V` will serve the log record number for the entry about module M version V, - followed by the data for the record. + followed by the data for the record (that is, the `go.sum` lines for module M version V). If the module version is not yet recorded in the log, the notary will try to fetch it before replying. Note that the data should never be used without first authenticating it against a signed tree hash. - - `/record/R` will serve the data for record number R. + - `/record/R` will serve the data for record number R (that is, the `go.sum` lines for + module M version V). - `/tile/H/L/K[.p/W]` will serve a [log tile](https://research.swtch.com/tlog#serving_tiles). The optional `.p/W` suffix indicates a partial log tile with only `W` hashes. |