Comments (2)
The claim definition explains that a receiver of this claim will not be able to interpret them without additional information in most cases. It is up front about this.
To a varying degree this is also true of other work and definitions in EAT and RATS. This is because EAT and RATS are for widely varying device architecture and operating systems. Attestations system will also vary in the checks they provide. EAT submodules will vary from device to device. CoRIM and CoMID and even AR4SI are similar in that the receiver will need additional information.
That said, it is possible to produce a very simple measurement result that indicates “all checks passed”. (The receiver still has to find out what all checks where done from an outside source because we are not defining an architecture to describe all possible system checking).
The claim is not specific to any particularly measurement system and should accommodate the reporting of measurements results from measurement schemes from many vendors.
from eat.
As per decision in RATS interim WG meeting on Dec. 12, 2022, it was decided to address the concerns underlying this issue in the AR4SI draft: https://github.com/ietf-rats-wg/draft-ietf-rats-ar4si/issues
from eat.
Related Issues (20)
- what is purpose of tolerating jti/cti claims HOT 6
- how to find/label Endorsement and Verification Keys HOT 5
- IANA considerations, expert review guidance needs clarity HOT 3
- some advice on freshness would be good HOT 8
- Should spoofed or corrupted location be addressed in the specification? HOT 3
- readers must be familiar with CDDL and CBOR diagnostic format
- add ref to EAT media types
- What are "attestations" HOT 5
- inconsistency in `iat` definition HOT 10
- prohibition around "passing through" claims from evidence to attestation results HOT 7
- IANA Considerations HOT 3
- The value of eat_nonce used in the examples HOT 7
- Security AD Review: clarify sec cons discussion on nonces HOT 1
- Security AD review: address SBOM comments HOT 2
- Security AD review: clarify intuse claim HOT 1
- How far to go with manifest and measurement sub types HOT 1
- use rfc2648 for profile identification HOT 1
- small typos in examples HOT 1
- Measurements encoding clarifications HOT 10
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from eat.