angela Is remote auditor private and if it is used on a compromised device, could the compromise lead to false auditor results?
raccoondad The auditor server requires you to login to view results, the auditor website couldn't forge signatures, the key used for signing is locked in the keystore.