In looking at the OCA Spec 1.1.0-rc, I don't see how each overlay is cryptographically linked to the capture base. Is that part of the spec? I think it is necessary that it be linked, and the technical approach needs to be specified to enable verification. For example, what is canonicalization scheme being used?
Does the scope of the spec cover only that there are standalone overlays that link to a capture base, or does the spec. also define how a set of standalone overlays can be combined together -- e.g. as a zip file or as a JSON structure?
In looking at the OCA Spec 1.1.0-rc, I don't see how each overlay is cryptographically linked to the capture base. Is that part of the spec? I think it is necessary that it be linked, and the technical approach needs to be specified to enable verification. For example, what is canonicalization scheme being used?
Does the scope of the spec cover only that there are standalone overlays that link to a capture base, or does the spec. also define how a set of standalone overlays can be combined together -- e.g. as a zip file or as a JSON structure?