Open
Description
keyids are an under-documented yet important concept in securesystemslib, as they allow to map a verification key to a signature. But from the current state of docs it is unclear how signatures get their keyids.
In #605 we agreed to mandate public_key: Key
attribute for any Signer
implementation. We should document that that public key's keyid is assigned to a signature created with Signer.sign
.