Distribute Attestation For Free

Attestation is the act of witnessing the signing of a formal document and then also signing it to verify that it was properly signed by those bound by its contents. Attestation is a legal acknowledgment of the authenticity of a document and a verification that proper processes were followed.

For example, you might write "I, Sally Sunshine, attest that I completed the weekend seminar in Sunny Valley, held October 3 - 7." For that sort of attestation letter, the body of the letter typically would only be a sentence or two.

This attestation provides assurance that the properties of the device (for example, the serial number) are legitimate (as attested to by the device's Secure Enclave and verified by Apple's servers) and not spoofed.

Definitions: The process of providing a digital signature for a set of measurements securely stored in hardware, and then having the requester validate the signature and the set of measurements. Sources: NIST SP 1800-19B under Attestation.

SafetyNet's attestation API verify the device's status against various factors (as per Google) like unlocked bootloader, presence of root binaries or third-party firmware (custom ROMs), and more.

Attestation helps us to find those devices that have been tampered with, or may have a bad or outdated version of software running on them, or even be outright s, to be identified. These are the types of things that you can determine.

Attestation is often used in legal or financial contexts, such as in the attestation of a will or the attestation of financial statements. Certification, on the other hand, refers to the process of verifying and validating that a product, service, or system meets certain standards or requirements.

Key Attestation gives you more confidence that the keys you use in your app are stored in a device's hardware-backed keystore. The following sections describe how to verify the properties of hardware-backed keys and how to interpret the schema of the attestation certificate's extension data.