Hacker News new | ask | show | jobs
by pluto_modadic 680 days ago
I was curious if someone would build something that allows the DCAP datacenter attestation to be exposed to applications, e.g. "prove via intel that the SHA of the software running on the machine is XYZ"
2 comments

Like Signal did for contact discovery? https://signal.org/blog/private-contact-discovery/
>"prove via intel that the SHA of the software running on the machine is XYZ"

This is exactly the purpose of MRENCLAVE in Intel SGX remote attestation quotes (and similar fields in other TEE platforms), and proving the software identity to remote clients is a common use case.

Maybe I misunderstand - is that what you mean, or is there another use case you are looking for?