Implement HTTPS interface for bootproof attestations #1

Open
opened 2025-09-21 19:08:50 +00:00 by Ghost · 0 comments
Ghost commented 2025-09-21 19:08:50 +00:00 (Migrated from codeberg.org)

Bootproof attestations can be queried via vsock or UNIX socket, and use a custom protocol to minimize dependencies. To allow easier integration with external libraries, an HTTPS API should be provided.

  • /healthz: Use an OpenTimestamp as the challenge to attest all sources are healthy. The returned attestation uses whatever the latest version of the API is.
  • /api/v1/attest?challenge=<data>: Use the provided challenge to get an attestation
Bootproof attestations can be queried via vsock or UNIX socket, and use a custom protocol to minimize dependencies. To allow easier integration with external libraries, an HTTPS API should be provided. * [ ] `/healthz`: Use an OpenTimestamp as the challenge to attest all sources are healthy. The returned attestation uses whatever the latest version of the API is. * [ ] `/api/v1/attest?challenge=<data>`: Use the provided challenge to get an attestation
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
public/enclaved#1
No description provided.