Auditor

Auditor copied to clipboard

Option to manually trigger remote attestation

5

useful for debugging

flawedworld

support detecting rollback resistance for key attestation v3 (Pixel 3)

1

thestinger

add interface for browsing pairings with support for deleting them like the web interface for the remote attestation service, replacing the clear options in the menu

1

thestinger

add a way to perform local verification from the lockscreen, marked as a special form of verification in the Auditor results

1

It's important to mark this as done from the lockscreen.

thestinger

Support multiple remote attestation servers

1

Might require #51. I would consider running my own remote attestation server if it was possible to add multiple remote servers in the Auditor app.

jonaharagon

Sorry in advance for posting this question here if not the right place. I want to verify whether the Auditor trust model fits my use case: Bob signs a message...

LeibnizCapital

thestinger

migrate away from deprecated IntentService and AsyncTask

1

thestinger

thestinger

add support for checking CRLs

1

This is currently very low priority because the Pixel intermediate is pinned and the batch certificates aren't narrowly scoped enough. The security is coming from keys being hardware-backed, not so...

thestinger