RFC 9943: An Architecture for Trustworthy and Transparent Digital Supply Chains | RFC Editor
Traceability in supply chains is a growing security concern. While Verifiable Data Structures (VDSs) have addressed specific issues, such as equivocation over digital certificates, they lack a universal architecture for all supply chains. This document defines such an architecture for single-issuer signed statement transparency. It ensures extensibility and interoperability between different transparency services as well as compliance with various auditing procedures and regulatory requirements.
CBOR Object Signing and Encryption (COSE) Receipts prove properties of a Verifiable Data Structure (VDS) to a verifier. VDSs and associated Proof Types enable security properties, such as minimal disclosure, transparency, and non-equivocation. Transparency helps maintain trust over time and has been applied to certificates, end-to-end encrypted messaging systems, and supply chain security. This specification enables concise transparency-oriented systems by building on Concise Binary Object Representation (CBOR) and COSE. The extensibility of the approach is demonstrated by providing CBOR encodings for Merkle inclusion and consistency proofs.
Your All-in-One Learning Portal: GeeksforGeeks is a comprehensive educational platform that empowers learners across domains-spanning computer science and programming, school education, upskilling, commerce, software tools, competitive exams, and more.
OverviewWe present dataframe-learn, a machine learning library where the output of training models is symbolic expressions. We first motivate why symbolic mo...
Fedora 45 Considering x86_64 Shadow Stack Usage By Default
A change proposal under consideration for Fedora Linux 45 would enable x86_64 Shadow Stack usage by default in the name of better security on modern Intel and AMD systems.
Most CLI auth flows spin up a localhost server and pray your browser cooperates. That model breaks the moment you're SSH'd into a server. RFC 8628 fixed this in 2019 and a lot of tools still haven't caught up.
The Linux Foundation Uses DNS to Give AI Agents a Trusted Identity
The Linux Foundation has announced two open-source initiatives that aim to strengthen enterprise AI by giving AI agents trusted identities through DNS and creating standardized frameworks for evaluating AI systems.
The Grammar of Data: Define Once, Run Anywhere with Cross-Engine Expressions – Xorq
Define once, run anywhere. A grammar of nouns, verbs, templates, and modifiers for data engineering that works across execution engines, with executable memory in a single git repository.
Build self-contained desktop applications from a Deno project, with framework auto-detection, hot reload, native windowing, auto-update, and cross-platform distribution.
CORS is a browser security mechanism, not a server one. What the Origin header and preflight checks actually do, what CORS protects against, and why it is not CSRF protection.
Livestreaming Trilemma: HLS, WEBRTC, MOQ | Fishjam blog
Live video has always been a trilemma: pick two of scale, latency, and cost. Does the new IETF protocol called Media over QUIC finally let you have all three?