Open thomas-fossati opened 1 week ago
Using attestation "conceptual messages" in REST APIs usually requires typing information in the form of Internet Media Types.
Media types are also used in CMW to type the wrapped content.
While the "pure" EAT ecosystem is taken care of by EAT media types, the wider landscape is not.
We must raise awareness in the community and coordinate media types registrations of the relevant attestation formats.
E.g., for Intel TDX and SGX, AMD SEV-SNP, (v)TPM, Event Logs, etc.
There is also he CoAP Content-Formats registry https://www.iana.org/assignments/core-parameters/core-parameters.xhtml#content-formats
And https://datatracker.ietf.org/wg/core/documents/
Using attestation "conceptual messages" in REST APIs usually requires typing information in the form of Internet Media Types.
Media types are also used in CMW to type the wrapped content.
While the "pure" EAT ecosystem is taken care of by EAT media types, the wider landscape is not.
We must raise awareness in the community and coordinate media types registrations of the relevant attestation formats.
E.g., for Intel TDX and SGX, AMD SEV-SNP, (v)TPM, Event Logs, etc.