It’s ironic that the mechanism used to deliver security updates to installed devices can itself make an entire fleet of devices vulnerable to attack. The TUF framework provides the best available means to protect software updates. Here we outline what TUF is and its basic principles of operation.