contentauth/c2pa-python

Is Key Usage Extension emailProtection a must?

Closed this issue 4 months ago · 2 comments

ttbuffey commented 4 months ago

for the certificate required by c2pa, is Is Key Usage Extension emailProtection a must? what if we don't include it.

crandmck commented 4 months ago

Yes, either that or document signing EKU, as explained in the documentation: https://opensource.contentauthenticity.org/docs/prod-cert#purchasing-a-certificate.

See also https://opensource.contentauthenticity.org/docs/manifest/signing-manifests#certificates.

crandmck commented 4 months ago

Closed as a question, not an actual bug or issue in the repo.