Hacker News new | ask | show | jobs
by apothegm 212 days ago
Why couldn’t someone else make their own signing system, though, and apply it to arbitrary images?
1 comments

Easier said than done, as I just went through it. And if they did, and it did all the checks to ensure the device is valid, the backend that tracks the devices and issues the certificates, accounting for the various methods of altering content to fake a valid one, then I'd applaud them.

This system works with both mobile device platforms and content created with it can be validated by the app on any other device. There will also be a web validation tool soon.

The security behind the solution is designed to withstand legal and audit challenges. Making your own signing system is not as simple as it sounds.