MIME-Version: 1.0
References: 
 <178592625332.1174.15715227575457159982@dt-datatracker-54dc84885d-8d5gh>
 <VI0PR07MB11371696F052D3CC97C2DBBB5ABD32@VI0PR07MB11371.eurprd07.prod.outlook.com>
 <CAFpG3gcTVg0DJWb28E25EnH1CjUxe_y8T2HrKFFaCp2ouAPHpQ@mail.gmail.com>
 <f477291c-970c-47be-9692-b217ee1c204e@tu-dresden.de>
 <CAFpG3gfR4RxVNrO655aU_eYDnbm00OFixFuGqSvUkgn1aBu-Yw@mail.gmail.com>
 <VI0PR08MB115658E2E506025EA0864F8D18AD22@VI0PR08MB11565.eurprd08.prod.outlook.com>
 <CAK08nYZKVXUrgQ+e_nGaMEGF05BJ7bXTkxV2jba-uw=zfXnNVw@mail.gmail.com>
 <CAFpG3gcUcMomBghByUa8Z3mQLQuK8xPOO6-oR+1+SPXi-5c6gg@mail.gmail.com>
In-Reply-To: 
 <CAFpG3gcUcMomBghByUa8Z3mQLQuK8xPOO6-oR+1+SPXi-5c6gg@mail.gmail.com>
From: Songbo Bu <bluedognull@gmail.com>
Date: Sat, 8 Aug 2026 21:51:40 +0800
Message-ID: 
 <CAK08nYZOxBtFcz6V33Ey4RTBW_1P_kZcXVVJApjAGHRz5mFfZw@mail.gmail.com>
To: tirumal reddy <kondtir@gmail.com>
Content-Type: multipart/alternative; boundary="00000000000059e8960658896ce2"
Message-ID-Hash: TNHMIAPU2OXUPONIWXMNOVFW7OSSTOST
CC: Ionut Mihalcea <Ionut.Mihalcea@arm.com>,
 Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>,
 "seat@ietf.org" <seat@ietf.org>, nd <nd@arm.com>
Precedence: list
Subject: =?utf-8?q?=5BSeat=5D_Re=3A_FW=3A_New_Version_Notification_for_draft-fossati-?=
	=?utf-8?q?seat-early-attestation-06=2Etxt?=
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/seat/4so3LxHOOXHS1wnvhuoeWWgeCHk>

--00000000000059e8960658896ce2
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

tirumal reddy <kondtir@gmail.com> =E4=BA=8E2026=E5=B9=B48=E6=9C=887=E6=97=
=A5=E5=91=A8=E4=BA=94 18:29=E5=86=99=E9=81=93=EF=BC=9A

> The attestation binder in Section 5.1.1 binds the Evidence to the
> ClientHello...ServerHello transcript, which commits to both peers'
> ephemeral key shares. The binder additionally incorporates the hash of th=
e
> attester's TLS identity key (the public key of the attester's end-entity
> certificate used for authentication).  The binding is therefore specific =
to
> the two endpoints of the TLS connection in which the Evidence was produce=
d.
>
Hi Tiru,

It is important to understand that:
partial transcript binding =E2=89=A0 channel-secret binding
There is no secret in ClientHello...ServerHello transcript, and can simply
be relayed over by the target environment, analogous to the one shown in
intra-handshake.fail paper.

Also, for example, it does not bind to is the identity and
proof-of-possession of the key of the cloud provider. So we do not know
which server it is and hence, it breaks if a single server in the whole
world breaks, as shown in the ID-Crisis paper.

Best,
Songbo

--00000000000059e8960658896ce2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr"><span style=3D"backgroun=
d-color:transparent">tirumal reddy &lt;<a href=3D"mailto:kondtir@gmail.com"=
>kondtir@gmail.com</a>&gt; =E4=BA=8E2026=E5=B9=B48=E6=9C=887=E6=97=A5=E5=91=
=A8=E4=BA=94 18:29=E5=86=99=E9=81=93=EF=BC=9A</span></div></div><div class=
=3D"gmail_quote gmail_quote_container"><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padd=
ing-left:1ex"><div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr"><p dir=3D"=
ltr"><span style=3D"background-color:transparent">The attestation binder in=
 Section 5.1.1 binds the Evidence to the ClientHello...ServerHello transcri=
pt, which commits to both peers&#39; ephemeral key shares. The binder addit=
ionally incorporates the hash of the attester&#39;s TLS identity key (the p=
ublic key of the attester&#39;s end-entity certificate used for authenticat=
ion).=C2=A0 The binding is therefore specific to the two endpoints of the T=
LS connection in which the Evidence was produced.</span></p></div></div></d=
iv></blockquote><div dir=3D"ltr">Hi Tiru,<br><br>It is important to underst=
and that:<br aria-hidden=3D"true">partial transcript binding =E2=89=A0 chan=
nel-secret binding<br aria-hidden=3D"true">There is no secret in ClientHell=
o...ServerHello transcript, and can simply be relayed over by the target en=
vironment, analogous to the one shown in intra-handshake.fail paper.<br><br=
>Also, for example, it does not bind to is the identity and proof-of-posses=
sion of the key of the cloud provider. So we do not know which server it is=
 and hence, it breaks if a single server in the whole world breaks, as show=
n in the ID-Crisis paper.<br><br>Best,<br aria-hidden=3D"true"></div><div><=
span style=3D"background-color:transparent">Songbo</span></div></div></div>

--00000000000059e8960658896ce2--