Daniel Micay
Daniel Micay
This is saved in the server implementation along with a log of attestations.
I just need time to properly test and review changes like this and it has to be mirrored for AttestationServer. It can't be done only for the Auditor app. This...
Seems the new API isn't actually implemented upstream yet.
We can initially provide it for only the local verifications if we want.
Google doesn't appear to be publishing CRLs yet and there's not much point until the key attestation ecosystem is more mature.
We need a project member to verify this and we're not set up for that right now. We're supposed to be doing this ourselves with the submitted samples, but we...
The main thing that needs to be done is verifying that it's a valid sample based on one of Google's roots and extracting the different properties from, along with testing...
Also, we need to test verifying both with and without StrongBox. Auditor will only use StrongBox but I like to know that we have the correct setup for TEE too....
I can try providing some more details later.