Skip to content

Some fixes that were destined for the new site, but... #209

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

lrosenthol
Copy link
Contributor

  • link to 2.2 not 2.1
  • add placeholders for the new DSTs

Copy link
Contributor

@sherifhanna-google sherifhanna-google left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to add c2pa.org/conformance, with a minimal page that links to the GitHub public repo, and also links to the Expression of Interest form (or alternatively embeds it in the page).


## Introduction

TBD
Copy link
Contributor

@sherifhanna-google sherifhanna-google Jun 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
TBD
### Conforming Products
The C2PA recognizes that parties that rely on media for critical decisions need assurance that files that contain C2PA Content Credentials were created using products, devices, or services that implement the C2PA Content Credentials specification correctly and securely. Likewise, those relying parties need assurances that products that validate files with C2PA Content Credentials do so correctly and securely.
In response, the C2PA has created the C2PA Conformance Program to fulfill the above needs, whereby it evaluates C2PA implementations for:
1. Functional correctness with respect to the normative requirements of the C2PA Content Credentials specification
2. Security of implementation following a minimum set of widely-accepted secure design best practices
The C2PA Conformance Program makes the results of that evaluation known by including said implementations on the public C2PA Conforming Products List with a status of `conformant`. Entities implementing Generator Products or Validator Products may wish to submit their implementations for evaluation by the C2PA Conformance Program, and if deemed to meet its requirements, to obtain the aforementioned public recognition that their implementations have been deemed by the C2PA Conformance Program to be Conforming Products.
### C2PA Trust List and C2PA TSA Trust List
C2PA Content Credentials technology relies on the use cryptographic key pairs and digital certificates, as well as cryptographic time-stamps, to create digital signatures over the Claims in C2PA Manifests, thereby protecting their integrity and facilitating the authentication of the entities that produced them. This creates a dual need:
1. Entities implementing Generator Products which have been deemed “conformant” by the C2PA Conformance Program, require digital certificates and time-stamps to sign the C2PA Claims in media they produce, and need those digital certificates and time-stamps to be issued by Certification Authorities and Time-Stamping Authorities that are trusted to perform such functions by relying parties.
2. Relying parties need cryptographic assurance of the identity of the entities that sign over C2PA claim in C2PA assets.
As such, the C2PA maintains the C2PA Trust List and the C2PA TSA Trust List. The former lists root or issuing Certification Authorities that issue claim signing certificates to instances of conformant Generator Products, and the latter lists root or issuing Certificiation Authorities that issue time-stamping certificates to Time-Stamping Authorities.
The organzitions that operate the Certification Authorities on these lists have demonstrated conformance with the requirements outlined in the C2PA Certificate Policy, and as such have been deemed eligible by the C2PA Conformance Program to render Certificate Services and Time-Stamping Services to Generator Products.


TBD

## Checklist
Copy link
Contributor

@sherifhanna-google sherifhanna-google Jun 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
## Checklist
Machine-Readable Lists


## Checklist

TBD
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
TBD


TBD

## Program Details
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
## Program Details
## Governing Documents


## Program Details

https://github.com/c2pa-org/conformance-public
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
https://github.com/c2pa-org/conformance-public
https://github.com/c2pa-org/conformance-public/tree/main/docs/current


https://github.com/c2pa-org/conformance-public

## Interested in participating?
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
## Interested in participating?
## Getign Started

Comment on lines +20 to +21
https://docs.google.com/forms/d/e/1FAIpQLSds0w9DHq_x9iFoQ3sM_a3n9-m_yPRkGEuInCDmc7FBbTCd4w/viewform

Copy link
Contributor

@sherifhanna-google sherifhanna-google Jun 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
https://docs.google.com/forms/d/e/1FAIpQLSds0w9DHq_x9iFoQ3sM_a3n9-m_yPRkGEuInCDmc7FBbTCd4w/viewform
Entities that create Generator Products or Validator Products, or operate Certification Authorities, may begin the process of applying to the C2PA Conformance Program by filling out this [Expression of Interest](https://docs.google.com/forms/d/e/1FAIpQLScERZH5rKfoeSu3y6gGbkllkyeAhmF0G-kXS0eXpb2vR238Rg/viewform?usp=header) form.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants