Skip to content

Commit

Permalink
leave specifics out of it
Browse files Browse the repository at this point in the history
Signed-off-by: Tom Hennen <tomhennen@google.com>
  • Loading branch information
TomHennen committed Dec 9, 2024
1 parent b37a72d commit f7a9b11
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions docs/spec/draft/principles.md
Original file line number Diff line number Diff line change
Expand Up @@ -126,8 +126,8 @@ to reveal their legal identity.**

**Reasoning**: SLSA uses identities for multiple purposes: as a trust anchor for attestations
(i.e. who or what is making this claim and do I trust it to do so) or for attributing actions
to an actor. Choice of identification technology is left to the platform that provides the
action (e.g. username, cryptographic signing key, etc.).
to an actor. Choice of identification technology is left to the organization and technical
stacks implementing the SLSA standards.

When identities are strongly authenticated and used consistently they can often be leveraged
for both of these purposes without requiring them to be mapped to legal identities.
Expand Down

0 comments on commit f7a9b11

Please sign in to comment.