c2pa-org / public-draft

Repository for the public drafts of the C2PA Specifications
Creative Commons Attribution 4.0 International
35 stars 1 forks source link

Ingredients aren't clearly explained #14

Closed lrosenthol closed 2 years ago

lrosenthol commented 3 years ago

From the JPEG Fake Media group

As I read it, all of these steps are standalone. One claim does not authenticate another claim. If this is about stopping dishonest people, then all prior claims must be validated first. There needs to be a verifiable chain of custody. (Bob received this picture from Alice. Bob confirmed Alice's signature, and here is Bob's signature. Carol received the picture and validated both Bob and Alice's signature. Carol cannot just validate Bob since Bob may have lied about validating Alice's signature. Dave validates Carol, Bob, and Alice. Erin validates Dave, Carol, Bob, and Alice. Etc.)

In C2PA we handle this via ingredients - but the info about what they are and how they work is spread out across the document...we need to bring this together and explain!

lrosenthol commented 3 years ago

TWG Agrees to address for next public draft

lrosenthol commented 2 years ago

Both the Explainer and the Guidance document include information about Ingredients. If the spec also needs, we should open another issue.