Subject: Re: [Rats] Minimizing the Attestation Results objects which canrepresent overall Attester trustworthiness

From: Laurence Lundblade <[email-masked]>
Date: Wed, 23 Mar 2022 09:35:59 +0100

Could this design principle be added for ar4si? I thought we were adding it back in August.

Could be more specific about device types and say implementation architectures instead (pure HW, Android App, big complex OS, small tiny with almost no OS…)

> On Aug 17, 2021, at 5:13 PM, Eric Voit (evoit) <evoit=[email-masked]> wrote:
> 
> I would like to add this important design principle:
>  
> (5) Cover the full range of use cases, device types and security levels. Use cases may include letting a device on the network, a financial transaction, a biometric authentication and more. Device types may include complex mobile phones, simple IoT sensors, laptops and network equipment. Security levels may range from EAL 5 certified secure element, to a TEE, to entirely simple minimal devices with no special security properties.
> <eric> Works for me.   Each device will need to specify which claims are realistically supportable based on the underlying hardware.

LL