Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

doc: add back mistakenly removed sentence #308

Merged
merged 2 commits into from
Aug 1, 2024

Conversation

yizha1
Copy link
Contributor

@yizha1 yizha1 commented Jul 30, 2024

Resolve #274

Signed-off-by: Yi Zha [email protected]

Copy link
Contributor

@Two-Hearts Two-Hearts left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These attributes are typically signed by a third party (e.g. CA, TSA).

This sentence is misleading that readers may think unsigned attributes are counter signatures. However, they are not.

Again, unsigned attributes can be added or stripped without signers' notice even if they are signed by a 3rd party.

@yizha1
Copy link
Contributor Author

yizha1 commented Jul 30, 2024

@shizhMSFT do you have any suggestions? In most cases (typically), the unsigned attributes contain attributes that are signed by CA or TSA.

Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@yizha1 I'd suggest leaving it as it is now or considering

These attributes may be independently signed by a third party (e.g. CA, TSA) for various purposes.

Signed-off-by: Yi Zha <[email protected]>
@yizha1 yizha1 requested a review from shizhMSFT July 31, 2024 00:27
Copy link
Contributor

@priteshbandi priteshbandi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@yizha1 yizha1 merged commit 46854e0 into notaryproject:main Aug 1, 2024
1 check passed
@yizha1 yizha1 deleted the fix-issue274 branch August 1, 2024 00:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Follow up the removal of unsigned attributes are typically signed by a third party
5 participants