Chapter 3 · Approver

Your approver makes a key.

Their device creates it and keeps it. We only ever see the public half.

This device asks for Face ID, Touch ID, Windows Hello or its PIN. With your phone, the browser shows a code: scan it, and the phone makes the key and keeps it. Nothing biometric leaves either.

Behind this chapter
  1. Your AP system
  2. Connector
  3. Avouch
  4. Approver’s device
  5. Public log
  6. Anyone
  1. public keyApprover’s device → Avouch Sends the public half of a new key. The private half never leaves the device.Not yet
AvouchSet up a key

Create a key for Avouch

demo-2850ec07@demo.invalid

Kept onThis device or your phone
Sent to AvouchThe public half only

Drawn as a phone. The key itself is in this device’s own authenticator.