Auditor is capable of performing local and remote audits, however, local auditing is harder to rely upon in practice, as average users may feel inconvenienced or annoyed every time someone asks.
I propose "proxied attestation", where devices that are joined to an attestation account can use that account to send local audits to other devices.
The prerequisites to use this feature are:
- The device must be added to an attestation.app account.
- The device must have an existing pairing with another device on the same attestation account. (Attestation.app cannot and should not create pairings on behalf of the user.)
- The device must send a valid attestation to attestation.app before receiving audit data for other devices.
The only privacy implication I am aware of is that attestation.app would know which devices are paired with eachother, and devices would know which of their pairings are on the same attestation account. This can be resolved with an opt-out toggle in Auditor to not permit proxied attestations.
Auditor is capable of performing local and remote audits, however, local auditing is harder to rely upon in practice, as average users may feel inconvenienced or annoyed every time someone asks.
I propose "proxied attestation", where devices that are joined to an attestation account can use that account to send local audits to other devices.
The prerequisites to use this feature are:
The only privacy implication I am aware of is that attestation.app would know which devices are paired with eachother, and devices would know which of their pairings are on the same attestation account. This can be resolved with an opt-out toggle in Auditor to not permit proxied attestations.