Re: [Teep] local attestation

["Smith, Ned" <[e-mail]>]

From a TEE perspective attestation from TEE to TEE both on the same host is ‘local’ attestation but it is automated.

Use of ‘local’ and ‘remote’ attestation is subjective based on context assumptions. It usually results in lots of Q/A fumbling in the dark before people get on the same page (like this thread) which is why its use should be discouraged IMHO.
-Ned

From: Brendan Moran <[e-mail]>
Date: Thursday, March 24, 2022 at 4:08 AM
To: "Smith, Ned" <[e-mail]>
Cc: "[e-mail]" <[e-mail]>
Subject: Re: [Teep] local attestation

Hi Ned,

That’s a fair point, but what I was really going for here is to distinguish it from “remote attestation.” There’s an additional point that there needs to be some OOB data transfer to obtain the “correct” values for the TA. For example, you could imagine a TA Transparency Log; something that is used to TATL on misbehaving TAMs.

Best Regards,
Brendan


On 24 Mar 2022, at 09:44, Smith, Ned <[e-mail]<mailto:[e-mail]>> wrote:

I think this should be called ‘human-verifieable attestation’. Local is ambiguous as it requires context that distinguishes between what constitutes remove / local and neither designation requires the entities to be human.

From: TEEP <[e-mail]<mailto:[e-mail]>> on behalf of Brendan Moran <[e-mail]<mailto:[e-mail]>>
Date: Monday, March 21, 2022 at 12:19 PM
To: "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>
Subject: [Teep] local attestation

I was asked to propose some text on local attestation.

While it may be the case that an asset must sometimes be secret from the user, it is not the case that the user should know nothing about the asset; the end user should be able to verify the authenticity and integrity of the asset. To enable this, local attestation can be used to prove integrity to the user. The user can then use that integrity check to verify authenticity, for example by checking against a signature or by verifying the expected integrity check using conventional web pki.

Thanks,
Brendan
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.