From 3cded9db07e0d09b14d7017858c317a994df4555 Mon Sep 17 00:00:00 2001 From: Rand McKinney Date: Thu, 8 Aug 2024 15:51:03 -0700 Subject: [PATCH 1/2] Add note about not accessing cert locally in prod --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index f668bb59..ed978e28 100644 --- a/README.md +++ b/README.md @@ -72,6 +72,8 @@ except Exception as err: ### Add a signed manifest to a media file or stream +**WARNING**: This example accesses the private key and security certficate directly from the local file system. This is fine during development, but don't do it production because it exposes these sensitive files to potential attackers. Instead use a hardware security module (HSM) and optionally a Key Management Service (KMS) to access them; for example as show in the [C2PA Python Example](https://github.com/contentauth/c2pa-python-example). + Use a `Builder` to add a manifest to an asset. ```py From 8f725f22feb89cfb056de85b439ff69ab7d13660 Mon Sep 17 00:00:00 2001 From: Rand McKinney Date: Fri, 23 Aug 2024 14:31:31 -0700 Subject: [PATCH 2/2] Update README.md --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index ed978e28..99fa59b7 100644 --- a/README.md +++ b/README.md @@ -72,9 +72,9 @@ except Exception as err: ### Add a signed manifest to a media file or stream -**WARNING**: This example accesses the private key and security certficate directly from the local file system. This is fine during development, but don't do it production because it exposes these sensitive files to potential attackers. Instead use a hardware security module (HSM) and optionally a Key Management Service (KMS) to access them; for example as show in the [C2PA Python Example](https://github.com/contentauth/c2pa-python-example). +**WARNING**: This example accesses the private key and security certficate directly from the local file system. This is fine during development, but doing so in production may be insecure. Instead use a Key Management Service (KMS) or a hardware security module (HSM) to access the certificate and key; for example as show in the [C2PA Python Example](https://github.com/contentauth/c2pa-python-example). -Use a `Builder` to add a manifest to an asset. +Use a `Builder` to add a manifest to an asset: ```py try: