certified-variables

Query responses on the Internet Computer come from a single replica and are NOT verified by consensus. A malicious or faulty replica could return fabricated data. Certification solves this: the canister stores a hash in the subnet's certified state tree during update calls, and then query responses include a certificate signed by the subnet's threshold BLS key proving the data is authentic. The result is responses...

No external canister IDs required. Certification uses the IC system API exposed through CDK wrappers:

For canisters serving HTTP responses directly (not through the asset canister), responses must be certified so the HTTP gateway can verify them.

マークル ツリーとサブネット BLS 署名を使用して、クエリ呼び出しから暗号的に検証された応答を提供します。認証済みデータ API、RbTree/CertTree 構築、証人生成、フロントエンド証明書検証をカバーします。クエリ応答に検証、証明されたデータ、または応答の信頼性証明が必要な場合に使用します。 ソース: dfinity/icskills。