eric/geth
Watch
1
0
Fork
You've already forked geth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

simplify sigchain http distribution
Some checks failed
CI / fmt, clippy, docs (push) Failing after 5s
Details
CI / test (ubuntu-latest) (push) Failing after 5s
Details
CI / iroh integration smoke tests (push) Failing after 4s
Details
CodeQL / Analyze Rust (push) Failing after 5s
Details
Security / RustSec cargo-audit (push) Failing after 4s
Details
CI / test (macos-latest) (push) Has been cancelled
Details
CI / test (windows-latest) (push) Has been cancelled
Details

Browse source
This commit is contained in:
Eric Wendland 2026-07-19 03:43:06 +02:00
commit 538b52bdb6
12 changed files with 66 additions and 72 deletions
Download patch file Download diff file Expand all files Collapse all files

10
docs/sigchain-keychain.md
View file

@ -114,11 +114,11 @@ geth keychain bundle-extract --in chain.sscb --out chain.jsonl
The canonical bundle keeps disclosures separate from signed record objects and
sorts every object class deterministically. Adding a disclosure changes the
bundle hash but not the chain head. The same file is the simple static HTTP
distribution artifact at
`/.well-known/sshsigchain/v1/<chain-id>/chain.sscb`. Distribution is untrusted:
the configured root, authority replay, anchor policy, locally accepted head,
and fork checks still decide acceptance.
bundle hash but not the chain head. The same single file is the static HTTP
distribution artifact at any explicitly configured URL; there is no well-known
path, URL derivation, or trust-on-first-use. Distribution is untrusted: the
configured root, authority replay, anchor policy, locally accepted head, and
fork checks still decide acceptance.
## Local commands