File tree Expand file tree Collapse file tree 2 files changed +4
-4
lines changed
docs/architecture/attestation
versioned_docs/version-1.15/architecture/attestation Expand file tree Collapse file tree 2 files changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -9,7 +9,7 @@ Contrast uses remote attestation in two ways:
99
1010Most of the time, verifiers want to establish a secure channel to the attester in order to exchange further messages.
1111For example, the Coordinator hands out secrets to workloads or seed share owners over this secure channel.
12- Contrast uses a protocol on top of TLS 1.2 , together referred to as _ aTLS_ , to establish such a channel and verify the attestation at the same time.
12+ Contrast uses a protocol on top of TLS 1.3 , together referred to as _ aTLS_ , to establish such a channel and verify the attestation at the same time.
1313
1414## Conceptual messages
1515
@@ -53,7 +53,7 @@ The client parses the nonce from this field and creates the TLS private key and
5353Like the server, it embeds the report as a certificate extension and sends it back to the server with the ` ClientCertificate ` message.
5454
5555The following diagram shows the relevant messages carrying attestation protocol information.
56- Some messages of the TLS 1.2 handshake that aren't relevant to attestation are omitted.
56+ Some messages of the TLS 1.3 handshake that aren't relevant to attestation are omitted.
5757
5858``` mermaid
5959sequenceDiagram
Original file line number Diff line number Diff line change @@ -9,7 +9,7 @@ Contrast uses remote attestation in two ways:
99
1010Most of the time, verifiers want to establish a secure channel to the attester in order to exchange further messages.
1111For example, the Coordinator hands out secrets to workloads or seed share owners over this secure channel.
12- Contrast uses a protocol on top of TLS 1.2 , together referred to as _ aTLS_ , to establish such a channel and verify the attestation at the same time.
12+ Contrast uses a protocol on top of TLS 1.3 , together referred to as _ aTLS_ , to establish such a channel and verify the attestation at the same time.
1313
1414## Conceptual messages
1515
@@ -53,7 +53,7 @@ The client parses the nonce from this field and creates the TLS private key and
5353Like the server, it embeds the report as a certificate extension and sends it back to the server with the ` ClientCertificate ` message.
5454
5555The following diagram shows the relevant messages carrying attestation protocol information.
56- Some messages of the TLS 1.2 handshake that aren't relevant to attestation are omitted.
56+ Some messages of the TLS 1.3 handshake that aren't relevant to attestation are omitted.
5757
5858``` mermaid
5959sequenceDiagram
You can’t perform that action at this time.
0 commit comments