How do the C2PA security requirements differ for Edge, Backend and Distributed generator products, and what does the public Conforming Products List record about them?
The security requirements apply to all classes unless noted. Edge binaries must not embed authentication secrets; Edge and Backend subsystems must authenticate each other; Distributed and Backend products have extra documentation and monitoring requirements. The public CPL lists 240 generator products, most at assurance level 1.
The security requirements apply to all classes unless noted. Edge binaries must not embed authentication secrets; Edge and Backend subsystems must authenticate each other; Distributed and Backend products have extra documentation and monitoring requirements. The public CPL lists 240 generator products, most at assurance level 1.
Curator qualifications: Documents read 2026-10-22; not legal advice; nothing signed. Hardware-root-of-trust and TLS 1.3 details carried from producer reading.
Limitations: Documents read 2026-10-22; not legal advice; nothing signed.
Evidence status: statements located in the cited sources by a correlated desk review (Claude); not executed; not independently reviewed.
Structured fields
{
"citations": [
{
"url": "https://github.com/c2pa-org/conformance-public/blob/312f5b1c2535862fa7c9df9d9680fc323d002ff2/conforming-products/conforming-products-list.json",
"note": "docs/v0.2/C2PA Generator Product Security Requirements.md L350, L398, L416; conforming-products-list.json (curator count, CA-B501)"
}
]
}Evidence claims
- [sourced_fact] The security requirements apply to all classes unless noted. Edge binaries must not embed authentication secrets; Edge and Backend subsystems must authenticate each other; Distributed and Backend products have extra documentation and monitoring requirements. The public CPL lists 240 generator products, most at assurance level 1. · locator: docs/v0.2/C2PA Generator Product Security Requirements.md L350, L398, L416; conforming-products-list.json (curator count, CA-B501) source
Rights
| component | license | hosting | redistribution | modification | training | Evidence and notes |
|---|---|---|---|---|---|---|
| documentation | unknown | permitted | permitted | unknown | unknown | Applies to this original summary only, not to the cited sources. |