+1 (non-binding) 2018-02-01 12:39 GMT-08:00 Andreas Zitzelsberger <andreas.zitzelsberger@...>:

Hey Dan, We just came across a tool called Kolide which independently integrated notary as a library and had the resultant solution audited by NCC. https://github.com/kolide/updater/blob/master/README

Hi Brian, Justin Cappos CC'd will have to answer on the precise ownership of the tuf repo. Answers to the other questions follow: What is the degree to which trust is tied to the distribution mechanis