make text consistent with image

pull/977/head
Hubert Chathi 6 years ago
parent f3997cd09e
commit 2d3b5f4481

@ -119,19 +119,19 @@ needed to reattach the parts of the graph.
One way to solve this is by registering a "virtual device", which is used to One way to solve this is by registering a "virtual device", which is used to
sign other devices. This solution would be similar to this proposal. However, sign other devices. This solution would be similar to this proposal. However,
real devices would still form an integral part of the attestation graph. For real devices would still form an integral part of the attestation graph. For
example, if Alice's phone verifies Bob's tablet, the attestation graph might example, if Alice's Osborne 2 verifies Bob's Dynabook, the attestation graph might
look like: look like:
![](images/1756-graph1.dot.png) ![](images/1756-graph1.dot.png)
If Bob replaces his tablet without re-verifying with Alice, this will split the If Bob replaces his Dynabook without re-verifying with Alice, this will split
graph and Alice will not be able to verify Bob's other devices. In contrast, the graph and Alice will not be able to verify Bob's other devices. In
in this proposal, Alice and Bob's master keys directly sign each other, and the contrast, in this proposal, Alice and Bob's master keys directly sign each
attestation graph would look like: other, and the attestation graph would look like:
![](images/1756-graph2.dot.png) ![](images/1756-graph2.dot.png)
In this case, Bob's tablet can be replaced without breaking the graph. In this case, Bob's Dynabook can be replaced without breaking the graph.
With normal cross-signing, it is not clear how to recover from a stolen device. With normal cross-signing, it is not clear how to recover from a stolen device.
For example, if Mallory steals one of Alice's devices and revokes Alice's other For example, if Mallory steals one of Alice's devices and revokes Alice's other

Loading…
Cancel
Save