{"action":"created","issue":{"url":"https://api.github.com/repos/theupdateframework/tuf/issues/346","repository_url":"https://api.github.com/repos/theupdateframework/tuf","labels_url":"https://api.github.com/repos/theupdateframework/tuf/issues/346/labels{/name}","comments_url":"https://api.github.com/repos/theupdateframework/tuf/issues/346/comments","events_url":"https://api.github.com/repos/theupdateframework/tuf/issues/346/events","html_url":"https://github.com/theupdateframework/tuf/issues/346","id":168989759,"number":346,"title":"Need support for multi-group / multi-threshold signing","user":{"login":"awwad","id":13263928,"avatar_url":"https://avatars.githubusercontent.com/u/13263928?v=3","gravatar_id":"","url":"https://api.github.com/users/awwad","html_url":"https://github.com/awwad","followers_url":"https://api.github.com/users/awwad/followers","following_url":"https://api.github.com/users/awwad/following{/other_user}","gists_url":"https://api.github.com/users/awwad/gists{/gist_id}","starred_url":"https://api.github.com/users/awwad/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/awwad/subscriptions","organizations_url":"https://api.github.com/users/awwad/orgs","repos_url":"https://api.github.com/users/awwad/repos","events_url":"https://api.github.com/users/awwad/events{/privacy}","received_events_url":"https://api.github.com/users/awwad/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-08-02T21:11:27Z","updated_at":"2016-08-02T21:28:08Z","closed_at":null,"body":"Currently, TUF delegations are limited to requiring a threshold number from one group of keys. Sometimes, a repository manager may want to provide a more elaborate set of requirements for who must sign a set of files.\r\n\r\nSuppose there is a directory of targets in the repository that should be signed **both** by two keys from group A (developer keys, say) **and** by a key from group B (a change manager's key, say). That (requiring X keys out of group A and Y keys out of group B) is not currently possible in TUF.\r\n\r\nAn addition to the TUF spec is warranted to allow for this kind of complex trust arrangement."},"comment":{"url":"https://api.github.com/repos/theupdateframework/tuf/issues/comments/237049885","html_url":"https://github.com/theupdateframework/tuf/issues/346#issuecomment-237049885","issue_url":"https://api.github.com/repos/theupdateframework/tuf/issues/346","id":237049885,"user":{"login":"awwad","id":13263928,"avatar_url":"https://avatars.githubusercontent.com/u/13263928?v=3","gravatar_id":"","url":"https://api.github.com/users/awwad","html_url":"https://github.com/awwad","followers_url":"https://api.github.com/users/awwad/followers","following_url":"https://api.github.com/users/awwad/following{/other_user}","gists_url":"https://api.github.com/users/awwad/gists{/gist_id}","starred_url":"https://api.github.com/users/awwad/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/awwad/subscriptions","organizations_url":"https://api.github.com/users/awwad/orgs","repos_url":"https://api.github.com/users/awwad/repos","events_url":"https://api.github.com/users/awwad/events{/privacy}","received_events_url":"https://api.github.com/users/awwad/received_events","type":"User","site_admin":false},"created_at":"2016-08-02T21:28:08Z","updated_at":"2016-08-02T21:28:08Z","body":"We have **[an alternative design](https://gist.github.com/awwad/07bcb8a576887cc0973f3067f83df3b3)** that should be flexible enough to address these concerns as well as a particular requirement for another project using TUF (Uptane).\r\n\r\nThe solution in the linked gist adds a new \"MultiRoleDelegations\" list to the \"delegations\" dictionary in Targets metadata. Please see that for more details.\r\n\r\n\r\n"}}
{"actor":{"display_login":"awwad"}}