Publisher Certificates

[skilesare]

Should we be signing these items before they go out?

[skilesare]

icrc72_get_certificate(nat) query => Return the certificate and tree to prove the body hasn't been manipulated.

[lachlanw]

This seems like an essential feature to all any receiver in the event message relay chain to confirm the integrity of the message data.
Should the draft provide example code showing how to use this function to perform a signature verification?

[skilesare]

Who can sign

• Subnet - sign state

• Canister - sign tecdsa

• Not required but we can provide the mechanism

Lachlan: External systems out side of the IC will need it.

[skilesare]

Add a header to indicate that a certificate exists.

[skilesare]

Austin: Summarize and Vote.

[skilesare]

Move this to its own ICRC

icrcXX_get_certificate(nat) query => Return the certificate and tree to prove the body hasn't been manipulated.

• icrcXX:eventData:certificateFlag - a #Text true if the source provides an endpoint for retrieving a certificate.