Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion content/summit2026/_index.html
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ <h2 class="headline4 gpt-2 gmb-2">Key Information</h2>

<h2 class="headline4 gpt-2 gmb-2">Call for Presentations</h2>
<p class="gmb-2">
The Call for Presentations is now open! Please submit your proposals using the <a href="https://docs.google.com/forms/d/e/1FAIpQLSds5HdEVXDssOKYETEEMoTbveqJe8i2QyPpKPtXFpXCd5-cXw/viewform">CFP form</a>.
The CFP is now closed. Talks that have been accepted can be seen <a href="/summit2026/talks">here</a>.
</p>

<h2 class="headline4 gpt-2 gmb-2">Timeline</h2>
Expand Down
44 changes: 44 additions & 0 deletions content/summit2026/confirmed-talks.html
Original file line number Diff line number Diff line change
@@ -0,0 +1,44 @@
---
url: /summit2026/talks
layout: index
title: "Transparency.dev Summit 2026 Confirmed Talks"
description: "Talks that have been confirmed for the Transparency.dev Summit 2026"
---
<section class="glue-page gmt-6 gmb-7">
<h1 class="headline2 sm:text-center gmb-4">
<div class="eyebrow">Transparency.dev Summit</div>
Confirmed Talks
</h1>
<div class="glue-grid gmt-4 gmb-2">
<div class="col-span-4 sm:col-span-8 sm:col-start-3">
<table class="w-full text-sm text-left rtl:text-right text-gray-500 dark:text-gray-400 gmb-2">
<tbody>
<tr class="border-b border-gray-200 dark:border-gray-700">
<td class="px-6 py-3">
Matthew McPherrin
</td>
<td class="px-6 py-3">
<a href="/summit2026/talks/le-mtcs.html">How Let's Encrypt is deploying Merkle Tree Certificates</a>
</td>
</tr>
<tr class="border-b border-gray-200 dark:border-gray-700">
<td class="px-6 py-3">
Hayden Blauzvern
</td>
<td class="px-6 py-3">
<a href="/summit2026/talks/sigstore.html">Simplicity through Transparency: How the PQC Migration is Streamlining Sigstore</a>
</td>
</tr>
<tr class="border-b border-gray-200 dark:border-gray-700">
<td class="px-6 py-3">
Ben Birt
</td>
<td class="px-6 py-3">
<a href="/summit2026/talks/git-ratchet.html">Git-ratchet: tooling for Git commit transparency</a>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</section>
33 changes: 33 additions & 0 deletions content/summit2026/talks/git-ratchet.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
---
url: summit2026/talks/git-ratchet.html
layout: summittalk
title: "Git-ratchet: tooling for Git commit transparency"
topImage:
type:
room:
start:
speaker: Ben Birt
speakerTitle:
---

<div class="font-google font-medium">

Dependents of Git repositories often depend directly on a
branch or tag. Unfortunately, without taking further precautions, this
exposes those dependents to attack by any party authorised to change the
target commits of those branches or tags. Worse, those attacks can then be
hidden by scrubbing the evidence - by repointing the branch or tag back to
a legitimate commit. Git-ratchet is a tool which dependents can use to
enforce that upstream Git repository owners are transparent about their
branch and tag state (and how it evolves over time) - and it uses witnesses
to prevent split-view attacks on that commit transparency.

---

### Speaker

Ben is a software engineer on Google's Oak team. He is part
of the group that launched Google's new Private AI Compute (PAIC) platform
and most recently set up PAIC's new Tessera-based binary transparency log.

</div>
30 changes: 30 additions & 0 deletions content/summit2026/talks/le-mtcs.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
---
url: summit2026/talks/le-mtcs.html
layout: summittalk
title: "How Let's Encrypt is deploying Merkle Tree Certificates"
topImage:
type:
room:
start:
speaker: Matthew McPherrin
speakerTitle:
---

<div class="font-google font-medium">

Let's Encrypt is working on launching Merkle Tree Certificates. In this talk,
we'll discuss how we've added Merkle Tree certificates to our Boulder CA
software, how we're serving our logs, and the testing, monitoring, and disaster
planning we're doing to ship a production-quality CA the world can rely on.
We'll compare running an MTCA and mirror to our previous ACME CA and static CT
logs, and what lessons from the past have informed our future architecture.

---

### Speaker

Matthew McPherrin is the technical lead of the Let's Encrypt site reliability
engineering team, which runs the Let’s Encrypt Certificate Authority and
Certificate Transparency logs.

</div>
43 changes: 43 additions & 0 deletions content/summit2026/talks/sigstore.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
---
url: summit2026/talks/sigstore.html
layout: summittalk
title: "Simplicity through Transparency: How the PQC Migration is Streamlining Sigstore"
topImage:
type:
room:
start:
speaker: Hayden Blauzvern
speakerTitle:
---

<div class="font-google font-medium">

The transition to post-quantum cryptography is an emerging necessity, but
PQC algorithms like ML-DSA introduce a significant hurdle for signing: keys
and signatures are orders of magnitude larger, ballooning metadata, egress
and storage costs for transparency ecosystems.

In this talk, we present the design for PQC for Sigstore, showing how
migrating to quantum-resistant algorithms is a greenfield opportunity to
drastically simplify artifact signing and verification with Sigstore.
Instead of just swapping out classical algorithms, we leveraged this unique
opportunity to revisit the system architecture and focus the design around
the transparency log as the primary enabler of simplicity and auditability.

Sigstore will provide "keyless" identity-bound signatures rooted in
transparency. We'll explore how this shift shrinks verification metadata
down to just a signed checkpoint while still preserving Sigstore's security
and threat models. Finally, we will discuss how a new leaf format elegantly
solves PQC signing algorithm storage overhead while concurrently preventing
log poisoning and preserving user privacy.

---

### Speaker

Hayden Blauzvern is a technical lead on Google’s Open Source Security
Team, focused on making open-source software supply chain more secure and
auditable. Hayden is a maintainer and the community chair on the Sigstore
project.

</div>
Loading