buherator on Nostr: Im not familiar with TUF. Here the key would be to verify the authenticity of ...

Im not familiar with TUF. Here the key would be to verify the authenticity of (bytecode)updates since you have to expect middleboxes in the network path that you shouldn't trust.