29 points | by Retr0id 12 hours ago ago
3 comments
> C2PA allows for arbitrary "exclusions". These are byte ranges within the file which are excluded from signature calculations
Glad to see we learned from the mistakes of SAML.
If not this, then how would you propose updating the signed file to contain the signature?
/s
Only tangentially related, but knowing that remote attestation and co. will only ever get... "better" fills me with impotent rage like almost nothing else. https://www.lafkon.net/tc/ (2004) was so very prescient.
> C2PA allows for arbitrary "exclusions". These are byte ranges within the file which are excluded from signature calculations
Glad to see we learned from the mistakes of SAML.
If not this, then how would you propose updating the signed file to contain the signature?
/s
Only tangentially related, but knowing that remote attestation and co. will only ever get... "better" fills me with impotent rage like almost nothing else. https://www.lafkon.net/tc/ (2004) was so very prescient.