Thanks for the interest in TUF!
As for the implementation, we're currently doing a bit of refactoring
behind the scenes. We may have messed something up when we were setting
this up. However, we are still open for business.
We are actually sprinting toward a publication deadline later tonight.
Let me get back to you in a day or two after I've looked into the issue you
describe.
As for projects that use TUF in production, we are being used by PrimoGENI.
There is a partial integration with the Seattle testbed as well where we
are used on their beta network. Once the refactoring is done (in the next
month or so) there is going to be a push for Seattle use in production.
quickstart was more of a demo tool than something that is used widely.
We've recently discussed whether to drop or refactor it.
The Tails project looks very interesting. What are you looking to have
TUF do? Is this meant as a substitute for apt? (Note that our package
manager integration isn't mature and so we should discuss this use case.)
Are you looking to have us update other software?
Thanks,
Justin
On Fri, May 4, 2012 at 4:42 AM, intrigeri <intrigeri@???> wrote:
> Hi,
>
> I am pondering using TUF for the Tails [0] upcoming incremental
> upgrade system.
>
>
> I was not able to clone the TUF VCS repository:
>
> $ hg clone --insecure https://www.updateframework.com/hg/tuf/
> warning: www.updateframework.com certificate with fingerprint
> 4b:14:f2:21:1b:43:3c:34:a0:3f:cc:bb:9d:ca:7c:de:ba:03:43:ed not verified
> (check hostfingerprints or web.cacerts config setting)
> destination directory: tuf
> requesting all changes
> abort: HTTP Error 500: Internal Server Error
>
> Am I doing something wrong, or is anything broken on your side?
>
>
> Also, I'm curious about the general state of the implementation,
> especially the quickstart.py one.
> Are there projects that use it in production?
>
>
> (Please note that the Cc'd tails-dev mailing-list is
> publicly archived.)
>
> [0] https://tails.boum.org/
>
> Regards,
> --
> intrigeri
> | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
> | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
>
