blog post about choosing your repository implementation

[jku]

I'd like to have a text I can link to that explains some of the things that affect the choices in TUF repository setup and (now that we have multiple implementations) makes practical comparisons.

We should write a blog post that talks about

• basic requirements that apply to any TUF setup (e.g. trusted client software that you can embed root metadata in)
• what tuf-on-ci and RSTUF are good for and and how they work differently

Planning to set up a TUF repository to securely deliver your digital artifacts? Confused by all of the choices available? This essay is for you!

@kairoaraujo a blog collaboration maybe?

[kairoaraujo]

@jku Yes, I would love to collaborate on this post. Thank you for the great opportunity.

[joshuagl]

I'd be happy to review early drafts