3 ms·
Is this certificate a TLS certificate? At least the TLS connection the user has should be with the "enclave", not a proxy server. If the connection is with a pr
by arboles 8mo ago
Is this certificate a TLS certificate? At least the TLS connection the user has should be with the "enclave", not a proxy server. If the connection is with a proxy server, the user can be MITM'd.
- FrasiertheLion 8mo agoYes, it is a TLS certificate generated by the enclave on boot (the code responsible for doing this is open source and the attestation is also included in the certificate so you can check that this is exactly what’s happening). We go into more detail in our attestation verification docs here: https://docs.tinfoil.sh/verification/attestation-architecture#tls-key-binding https://docs.tinfoil.sh/verification/attestation-architectur...
- arboles 8mo agoGreat. Thanks for the link also.