Skip to main content
Fresh attestation requests are in beta because they use V3 attestation, which is still being deployed.
Containers can request fresh attestation through /tinfoil/attestation.sock, including containers without networking. Set attestation: true on a container in tinfoil-config.yml to enable the socket; it defaults to false.

​
Request attestation

Set NONCE to the verifier’s fresh, random 32-byte challenge, encoded as 64 hexadecimal characters:
The socket serves only attestation GET requests. Requests return 503 until attestation is ready. To authenticate application output, you can also use an endorsed key to sign output.