Skip to content

Commit c36eaf4

Browse files
committed
Updates
1 parent 480ab64 commit c36eaf4

File tree

1 file changed

+4
-4
lines changed
  • articles/confidential-ledger

1 file changed

+4
-4
lines changed

articles/confidential-ledger/faq.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -20,12 +20,12 @@ sections:
2020
- question: |
2121
How can I tell if the Azure confidential ledger service would be useful to my organization?
2222
answer: |
23-
Azure confidential ledger is ideal for organizations with records valuable enough for a motivated attacker to try to compromise the underlying logging/storage system, including "insider" scenarios where a rogue employee might attempt to forge, modify, or remove previous records.
23+
Azure confidential ledger is ideal for organizations with records valuable enough for a motivated attacker to try to compromise the underlying logging or storage system, including "insider" scenarios where a rogue employee might attempt to forge, modify, or remove previous records.
2424
2525
- question: |
2626
What makes Azure confidential ledger much more secure?
2727
answer: |
28-
As its name suggests, the ledger utilizes [Azure Confidential Computing platform](../confidential-computing/index.yml) and the [Confidential Consortium Framework](https://www.microsoft.com/research/project/confidential-consortium-framework) to provide a high integrity solution that is tamper protected and evident. One ledger spans across three or more identical instances, each of which run in a dedicated, fully attested hardware-backed enclave. The ledger's integrity is maintained through a consensus-based blockchain.
28+
As its name suggests, the ledger utilizes the [Azure Confidential Computing platform](../confidential-computing/index.yml) and the [Confidential Consortium Framework](https://www.microsoft.com/research/project/confidential-consortium-framework) to provide a high integrity solution that is tamper-protected and evident. One ledger spans across three or more identical instances, each of which run in a dedicated, fully attested hardware-backed enclave. The ledger's integrity is maintained through a consensus-based blockchain.
2929
3030
- question: |
3131
When writing to the Azure confidential ledger, do I need to store write receipts?
@@ -45,10 +45,10 @@ sections:
4545
- question: |
4646
Does ACL offers querying on attributes other than the receipt/transaction ID?
4747
answer: |
48-
Besides querying with the receipt/transaction id, ACL offers historical querying capability to read the data from Genesis(or within a range) for a specific key using the collection id (also called the sub ledger id) parameter. We would be interested to know what other attributes would be useful for querying, as this is an area we are gathering input on for our product roadmap.
48+
Besides querying with the receipt/transaction ID, ACL offers historical querying capability to read the data from Genesis(or within a range) for a specific key using the collection ID (also called the sub ledger ID) parameter. We would be interested to know what other attributes would be useful for querying, as we are gathering input on for our product roadmap.
4949
5050
- question: |
51-
What about the data on disk. Is that encrypted separately? Where are the keys stored for that??
51+
Is the data on disk encrypted separately? If so, where are the keys stored?
5252
answer: |
5353
When storing data on the ledger, you can choose the public or private option. The public option is not encrypted; plain-text and a good fit for certain use cases which require tamper-evident and auditable ledger use. The private option, however, is encrypted. The data is encrypted using three levels of encryption (i.e. Ledger Secrets, Ledger Secret Wrapping Key, and Recovery key Shares), which is explained in detail [here](https://microsoft.github.io/CCF/main/architecture/cryptography.html).
5454

0 commit comments

Comments
 (0)