Where does attestation collide?

In Paul Ricoeur's philosophy, attestation is the kind of assurance by which a self affirms that it truly speaks, acts, narrates, and bears responsibility: a credence or self-testimony that is neither the certainty of proof nor the paralysis of doubt, but a trust always exposed to the possibility of suspicion. Ricoeur's Oneself as another makes attestation the characteristic 'veritative mode' of selfhood, the way we vouch for our own capacities. The referent is a mode of self-assurance about being a self, sharing only the word with a machine proving its state to a remote party.[1]

Unit

The self's credence in its own power to act and to be

Recovery means

Not applicable

Measured by

Not applicable; it is a philosophical mode of assurance, contrasted with proof and with doubt rather than quantified

In information security, remote attestation is a mechanism by which one system generates verifiable evidence about its own software and configuration (measurements signed by a hardware root of trust) so that a remote party can judge whether to trust it before granting access or secrets. Coker and colleagues' 2011 Principles of remote attestation sets out what makes such evidence meaningful: fresh, comprehensive, and bound to the platform that produced it. The referent is a trust-establishing protocol between machines, an entirely different construct from Ricoeur's self-assurance, joined to it only by the root meaning of bearing witness.[2]

Unit

The signed measurements of a platform's state presented to a verifier

Recovery means

Not applicable

Measured by

Judged by the freshness, completeness, and integrity of the attestation evidence and its binding to a trusted root