#identity

How a device and the cloud trust each other

“The private key proves you're you; the public key lets anyone check; the certificate makes a stranger trust that key without ever having met you — and the key itself never leaves the chip.”

v2 PRD, Part 3 — identity, payment, PII, compliance

“The PRD's job in the compliance section is to draw a small box around payment data and a smaller box around customer identity, and then design every other system component to stay outside both boxes.”