[Rats] Re: Adoption call for draft-lkspa-rats-verifiable-geo-fence

[Serhii Nikolaichuk <[e-mail]>]

Support adoption.

One data point in support of the premise, from measurement rather than
opinion.

I hold 26 hardware-signed attestation artifacts captured from a single
workload across three TEE families - AWS Nitro Enclaves, AMD SEV-SNP,
and Intel SGX via Microsoft Azure Attestation - in six cloud regions. I
searched every signed artifact for anything locational: region strings,
country, zone, datacenter, latitude, longitude. There is nothing. Not
one byte, in any of the three formats. The only matches on "geo" turned
out to be random substrings inside base64, which I checked individually.

Every geographic fact I can state about that corpus comes from outside
the signature: the region I picked in a console, and the directory name
I wrote when I saved the file. The hardware signed what was running.
Nobody signed where the machine was.

That is a narrow confirmation of the gap the draft opens with, measured
on the three attestation formats most widely deployed in commercial
clouds today. It says nothing about whether sealing location claims into
a quote is the right answer - I have no basis for an opinion on the
mechanism - only that the absence being addressed is real, and that in
the cloud case it is total rather than partial.

If the artifacts would be useful to the working group I am glad to share
them. They verify offline with a stock Python interpreter and no
third-party packages.

Serhii Nikolaichuk
Austin, Texas

On Sat, Aug 29, 2026 07:07 AM, Kathleen Moriarty <
[e-mail]> wrote:

> Greetings!
>
> This message begins the working group 2-week adoption call for:
> https://datatracker.ietf.org/doc/draft-lkspa-rats-verifiable-geo-fence/
>
> Please state interest in adopting or not, with reasons that would prevent
> or hold up adoption. The draft should not be considered to be in a final
> state as that is the last call purpose.
>
> Thank you!
>
> --
>
> Best regards,
> Kathleen
> _______________________________________________
> RATS mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>