Drupal Brief
Drupal Brief is the go-to podcast for quick and insightful AI generated summaries of the latest Drupal news, blogs, and podcasts. Stay informed and inspired in just a few minutes as we distill the most important updates and trends in the Drupal community! Drupal Brief is a podcast of Drupal Forge.
Drupal Brief
DrupalBrief: DrupalCon Atlanta - Supply Chain Security in Drupal and Composer
Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.
This Podcast details a presentation on enhancing the security of Drupal and Composer's software supply chain. The speakers discuss the inherent risks in digital supply chains and introduce initiatives like Drupal CMS and automatic updates, emphasizing the critical need for secure component delivery. They explain TUF (The Update Framework) and Rugged as key technologies implemented by the Drupal Association to cryptographically sign and verify Drupal packages. The presentation outlines the technical aspects of public key cryptography, digital signatures, and hash functions used in this process, alongside the architecture and ongoing development of the Rugged server. Ultimately, the goal is to ensure the integrity and authenticity of Drupal installations and updates, protecting against supply chain attacks.
---
This episode of DrupalBrief is sponsored by DrupalForge.org
DrupalBrief.com