{"id":101817,"date":"2021-10-27T16:23:35","date_gmt":"2021-10-27T14:23:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-intel-razvivaet-protokol-httpa-dopolnyayushhij-https"},"modified":"2021-10-27T16:23:35","modified_gmt":"2021-10-27T14:23:37","slug":"kompaniya-intel-razvivaet-protokol-httpa-dopolnyayushhij-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/kompaniya-intel-razvivaet-protokol-httpa-dopolnyayushhij-https","title":{"rendered":"Intel is developing the HTTPA protocol, which complements HTTPS.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Engineers from Intel have proposed a new protocol, HTTPA (HTTPS Attestable), which expands HTTPS with additional guarantees for the security of the computations performed. HTTPA ensures the integrity of user request processing on the server and verifies that the web service is trustworthy and that the code running in the TEE (Trusted Execution Environment) on the server has not been altered due to hacking or administrator tampering. <\/p>\n
HTTPS protects the transmitted data during network transmission but cannot eliminate the risk of data integrity breaches due to attacks on the server. Isolated enclaves created using technologies like Intel SGX (Software Guard Extension), ARM TrustZone, and AMD PSP (Platform Security Processor) allow for the protection of critical computations and reduce the risk of leaks or alterations of sensitive information at the endpoint. <\/p>\n
HTTPA, to guarantee the authenticity of transmitted information, utilizes the attestation features provided by Intel SGX, confirming the authenticity of the enclave where computations are performed. Essentially, HTTPA extends HTTPS with the capability of remote attestation of the enclave, allowing verification that it is executed in a genuine Intel SGX environment, thus ensuring that the web service can be trusted. The protocol is initially being developed as a universal solution and can also be implemented for other TEE systems besides Intel SGX.
<\/center> <\/p>\n
In addition to the standard HTTPS process for establishing a secure connection, HTTPA additionally requires the agreement on a trusted session key. The protocol introduces a new HTTP method, \"ATTEST,\" which allows processing of three types of requests and responses: <\/p>\n
\n
\"preflight\" to check if the remote side supports enclave attestation;\n
\"attest\" for agreeing on attestation parameters (selection of cryptographic algorithm, exchange of session-specific random sequences, session ID generation, and transmission of the enclave's public key to the client);\n
![\"Intel](\"\/wp-content\/uploads\/2021\/10\/c53a2701095cfb8166a4b25d4f97c772.jpg\")
<\/center> <\/p>\n![\"Intel](\"\/wp-content\/uploads\/2021\/10\/ea155f297e7858015a5589e5989afe38.jpg\")
<\/center> <\/p>\n