Content Trust with Home Assistant & Codenotary CAS
We started to update how Home Assistant does content trust using Codenotary CAS . With content trust, we can ensure that your system only runs containers/software as released by the original author. The author, in this case, can be the Home Assistant project, but also, for example, an add-on developer. This is an important security aspect, as it protects your instance from running possibly malicious software. Content trust verifies that the software you download, install or upgrade is exactly the same as it was released by its creator and ensures nobody messed with it along the way. Codenotary CAS is built around a decentralized, cryptographically coherent and verifiable database technology called immudb . It is used to store all these trusted content signatures. With immudb we will be able to host parts of the trusted content signatures data ourselves (we don’t do this yet). It could even be made available as a Home Assistant add-on that users can install locally. Important to know...