Skip to content

Commit d48d121

Browse files
committed
Update readme
1 parent daab94f commit d48d121

File tree

1 file changed

+25
-2
lines changed

1 file changed

+25
-2
lines changed

README.md

Lines changed: 25 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,30 @@ It has three commands:
1010

1111
Unlike `cvm-reverse-proxy`, this uses post-handshake remote-attested TLS, meaning regular CA-signed TLS certificates can be used.
1212

13-
However attestation generation and verification is not yet implemented - there is a trait provided and mock attestation for testing purposes.
13+
This repo shares some code with [ameba23/attested-channels](https://github.com/ameba23/attested-channels) and may eventually be merged with that crate.
1414

15-
This shares some code with [ameba23/attested-channels](https://github.com/ameba23/attested-channels) and may eventually be merged with that crate.
15+
## Measurement headers
16+
17+
When attestation is validated successfully, the following values are injected into the request / response headers:
18+
19+
Header name: `X-Flashbots-Measurement`
20+
21+
Header value:
22+
```json
23+
{
24+
"0": "48 byte MRTD value encoded as hex",
25+
"1": "48 byte RTMR0 value encoded as hex",
26+
"2": "48 byte RTMR1 value encoded as hex",
27+
"3": "48 byte RTMR2 value encoded as hex",
28+
"4": "48 byte RTMR3 value encoded as hex",
29+
}
30+
```
31+
32+
Header name: `X-Flashbots-Attestation-Type`
33+
34+
Header value:
35+
36+
One of `none`, `dummy`, `azure-tdx`, `qemu-tdx`, `gcp-tdx`.
37+
38+
These aim to match the header formatting used by `cvm-reverse-proxy`.
1639

0 commit comments

Comments
 (0)