Currently the _custom_root_ca parameter in the GoogleConfig class is only used for clean unittests. A careless developer could use this in a production environment which would, in special circumstances, lead to invalid attestations passing the verification. In the real world it would mostly lead to no attestation being verified at all - even valid ones.
Currently the
_custom_root_caparameter in theGoogleConfigclass is only used for clean unittests. A careless developer could use this in a production environment which would, in special circumstances, lead to invalid attestations passing the verification. In the real world it would mostly lead to no attestation being verified at all - even valid ones.