ietf-rats-wg / ietf-rats-usecases Goto Github PK
View Code? Open in Web Editor NEWRATS use cases
License: Other
RATS use cases
License: Other
This is an extract of an earlier discussion on the RATS mailing list.
Attestations are great but suffer from the generic PKI problem: Where are the trust anchors ?
The Web PKI is nowadays carefully maintained by the platform vendors. There is no counterpart for TEE attestation keys.
Some organizations are certainly prepared to go an extra mile to create their own repositories of trust anchors.
However, for those who lack incentives for maintaining trust anchor repositories an alternative approach seems feasible:
Add a URL like https://huawei.com/tee-roots
to the attested data. Consumers of such a scheme would then only have to configure a list of "trusted device vendors" expressed as Web domains like huawei.com
, google.com
, apple.com
etc. in order to securely retrieve trust anchors and verify attestations. That is, the trust model for this concept is based on 1) device vendor selection 2) the ubiquity of the Web PKI.
The text above is also supposed to qualify as a defensive publication.
I would be interested in co-editing an I-D if there is a reasonable chance getting WG adoption for the work.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.