The press page contains a full listing of news coverage.
June 16, 2021
The Sigstore community live-streamed a key generation and signing ceremony for the
Sigstore trust root, which is using The Update Framework (TUF) primitives to
provide a PKI model with no single entity in charge of the trust root, and
shorter root key lifespan than traditional PKI models.
March 5, 2021
The TUF specification
is now published as a rich HTML document with a table of contents, syntax
highlighting, cross-linking, and other features.
The new publication machinery also maintains a list of all versions published since the
October 30, 2020
The Python Software Foundation live-streams a key generation and signing ceremony that marks the first practical steps in deploying The Update Framework (TUF) to the Python Package Index.
February 15, 2020
PEP 458, Secure PyPI Downloads with Package Signing, is accepted and merged into the Python Enhancement Proposals (PEP) tree.
December 19, 2019
TUF becomes the first project led by an academic and the first specification-based project to graduate from the Cloud Native Computing Foundation.
Uptane becomes joins the Linux Foundation's Joint Development Foundation, giving
a pathway for ISO standardization of future versions of the specification.
July 31, 2019
The IEEE/ISTO standardizes version 1.0.0 of the Uptane specification.
June 3, 2019
Trishank Kuppusamy publishes a blog post announcing the integration of both TUF and a related framework, called in-toto, into Datadog Agent Integrations.
August 16, 2018
NYU Tandon School of Engineering becomes an associate member of the
Linux Foundation and a Bronze member of Automotive Grade Linux on the strength of the Foundation’s adoption of Uptane and TUF projects.
July 31, 2018
The Uptane Alliance, a nonprofit entity organized under the umbrella of
IEEE's International Standards and Technology Organization is formed.
The Alliance was tasked with overseeing the setting of standards for the implementation/deployment of Uptane, as well as the advancement and improvement of the technology itself.
January 25, 2018
Airbiquity receives a BIG Award for Business in the 2017 New Product of the Year Award category for its
Uptane-based OTAmatic over-the-air software and data management solution.
December 7, 2017
Justin Cappos and David Lawrence, senior security engineer at Docker, jointly
chaired the TUF/Notary Salon at KubeCon + CloudNativeCon North America. The flagship conference of the Cloud Native Computing Foundation
was held in Austin, Texas, December 6-8, 2017.
October 24, 2017
The Linux Foundation announced at Open Source
Summit Europe that TUF would become the latest hosted project of the Cloud Native Computing Foundation.
TUF and Notary are the first security projects to be adopted by CNCF.
August 10, 2017
Lukas Pühringer presented the talk “Rough Times? TUF Shines” at DebConf17, an “annual conference for Debian contributors, and users interested in improving Debian.”
The conference took place in Montreal, Canada, August 6-12, 2017.
July 3, 2017
Dr. Trishank Karthik Kuppusamy defended his dissertation on TUF and
Uptane. Congratulations! Work on these projects
will continue as Sebastien, Vlad, Justin, and others move forward!
May 10, 2017
Justin Cappos gave a
talk on TUF,
Uptane, and in-toto at
October 10, 2016
Lily Guo and Riyaz Faizullabhoy from Docker gave a
on TUF and Notary at LinuxCon+ContainerCon Europe 2016. Slides of their talk
September 22, 2016
TUF now welcomes proposals to extend the specification! For more information,
please see TUF Augmentation Proposals
August 24, 2016
Riyaz Faizullabhoy from Docker gave a
on TUF and Notary at LinuxCon North America. Slides of his talk are available
March 18, 2016
Trishank Kuppusamy presents “Diplomat: Using Delegations to Protect Community
Repositories” at NSDI 2016. Presentation
slides and audio of the talk are also available
February 22, 2016
David Lawrence and Ying Li from Docker present at PyCon 2016. The title
of their talk is: When the going gets tough, get TUF going
February 19, 2016
The Update Framework acquires a logo to call its own, thanks to Maria
Jose Barrera (https://twitter.com/joseemari) who created the logo, and
Santiago Torres who found Barrerra.
August 12, 2015
The Docker team announces Docker Content Trust, which
integrates TUF via Notary. Docker
Content Trust will be available starting with Docker 1.8, and supports image
signing and verification. For more information on the Docker + TUF
integration, consult this blog post.