Skip to main content

Content Attestation Set

Terminology​

For any terms not explained in this document, please see Terminology.

  • Content Attestation (CA)
  • Content Attestation Set (CAS)

Content Attestation Set (CAS) Data Model​

The data model is expressed in JSON.

CAS is an array of JSON Objects with the following properties:

NameTypeDescription
attestationstringREQUIRED. The property of Content Attestation.
mainbooleanOPTIONAL. If Content Attestation is for the main content, state true, otherwise state false. The default value is false.

JSON Serialization​

Convert the above data model as follows, where the media type is application/ca-set+json:

cas.map((e) =>
  e.main ? { attestation: e.attestation, main: true } : e.attestation,
);

Below is a non-normative example of the conversion:

["eyJ...", "eyJ...", { "attestation": "eyJ...", "main": true }, "eyJ..."]

Verification Process​

CAS verifiers can verify the following:

Reporting verification results​

This section is non-normative.

After running the verification, you need to communicate the results to your users. The following is a recommended method for reporting verification results:

  • Notify users of the results of CA verification included in the CAS
    • If the CA is successfully verified, it will be displayed to the user as a verified CA.
    • If CA verification fails, inform the user with a brief explanation of the type and reason.

OP Inspector may return the following error when verifying the CA:

  • CasVerifyFailed
    • CaInvalid
    • CoreProfileNotFound
    • CaVerifyFailed
  • Verified CAS

For details, see "CA Verification" and the OP Inspector source code.

Input:

  • Content Attestation Set (CAS)
  • URL of the web page that presented the CAS
  • Verified Originator Profile Set (OPS)