From ebeb62bc229514b1f103472e8c874d39d00a0039 Mon Sep 17 00:00:00 2001 From: steve lasker Date: Mon, 30 Sep 2024 17:49:18 -0700 Subject: [PATCH] Restore accidentally deleted content Signed-off-by: steve lasker --- draft-ietf-scitt-architecture.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/draft-ietf-scitt-architecture.md b/draft-ietf-scitt-architecture.md index 8a026b19..3554ff64 100644 --- a/draft-ietf-scitt-architecture.md +++ b/draft-ietf-scitt-architecture.md @@ -1085,6 +1085,10 @@ data:application/cose;base64,SGVsb...xkIQ== # Signing Statements Remotely +Statements about digital Artifacts, containing digital Artifacts, or structured data regarding any type of Artifacts, can be too large or too sensitive to be send to a remote Transparency Services over the Internet. +In these cases a Statement can also be hash, which becomes the payload included in COSE to-be-signed bytes. +A Signed Statement (cose-sign1) MUST be produced from the to-be-signed bytes according to {{Section 4.4 of RFC9052}}. + ~~~aasvg .----+-----. | Artifact |