Post #1945627
2026-04-30 18:25 UTC
@katexochen @Euler That's nice, but it means one must use the recovered public key as a trust anchor or generate a certificate using another trust anchor. Otherwise the signature doesn't prove anything.
Replies (1)
-
@katexochen@infosec.exchange 2026-05-01 12:05
@wamserma @Euler that's right. In our case, the recovered public key's digest is included in the attestation report. While the launch digest can change on migration, the digest is guaranteed to persist.