Comment Digital signatures and chain of trust for content (Score 1) 56
Camera makers are pushing for Content Authenticity. Look for CAI and C2PA standards. Canon are Nikon are both on board, also some phone makers, including Samsung, see https://news.samsung.com/globa...
Idea is that the device captures the image and signs it with vendor's certificate. Then, when you edit it in your editor (Photoshop - unfortunately GIMP not yet), the editor saves in the metadata what exactly you changed and signs with their own cert (e.g. "I cropped this photo and adjusted lighting curves a bit to bring dark portions out a bit more"). This chain can then be followed.
Same would apply for video material too. If all you do is cut the original clip and normalize audio, very easy to trace.
Of course it's not foolproof and you are supposed to trust the certs and the devices, but there *are* efforts to combat deepfakes.
The big problem with this is the editing bit - I mean, assuming you trust Samsung or Canon to save the content correctly and sign it, how can you trust changelog signed with Adobe's tacked onto that? Well, here's where the TPM part comes into play. But you basically need to only allow locked-down hardware to be used for editing.
I'm still hoping that this goes mainstream and not just for stuff like crime investigations and the like where authenticity of the evidence needs to be clear. It's of course full of holes but it's definitely much better than nothing.