Don't Trust, Verify: Building End-to-End Confidential Applications on Google Cloud- Google Developers Blog

What this post added

This post introduces Google Cloud's Confidential Space and Oak Functions for building end-to-end confidential services. It details the challenges of trust and scalability in confidential computing and presents Oak Session as a solution for application-level, end-to-end encryption using the Noise framework. The post explains the attestation process, including JWT claims and session binding, to establish trust between the client and the confidential workload. It highlights how users can verify the integrity of the running code through reproducible builds of the Oak Functions container.