What a publisher can send with a file

A photo desk that distributes signed images can now include certificate-status responses for multiple links in the signing chain. The Content Authenticity Initiative documented the capability in its November 11 release of the C interface to its Content Credentials software. Previously, a signer using the default interface supplied a single response. The change matters when a picture and its credentials travel together to a newsroom that has no direct relationship with the organization that signed it.

Evidence that survives the handoff

A signature depends on a chain of certificates connecting a signing key to an authority the recipient trusts. A certificate can be revoked before its scheduled expiration. An Online Certificate Status Protocol response records what a status service reported about a certificate at a particular time. The updated interface lets the signer collect those responses in advance and attach them in chain order, beginning with the signing certificate. A syndication customer can therefore receive status evidence for an intermediary alongside the evidence for the signer itself.

What the receiving desk still decides

The maintainers say the change preserves the existing validation behavior. A newsroom adopting the library can continue to produce the same single-response output until its signing service supplies more. For a picture editor investigating a disputed credit, even a complete set of responses addresses a narrow question about the credentials used to sign the file. Who took the picture, whether the caption identifies the scene correctly and what happened outside the frame still require reporting. The new interface gives an archive more of the technical record to preserve when it first receives the asset.

Sources & further reading

Our practical suggestions are editorial guidance. Verify applicability against current source and vendor instructions.

Media & entertainment
Suggest a correction →