> C2PA allows for arbitrary "exclusions". These are byte ranges within the file which are excluded from signature calculations

Glad to see we learned from the mistakes of SAML.

Only tangentially related, but knowing that remote attestation and co. will only ever get... "better" fills me with impotent rage like almost nothing else. https://www.lafkon.net/tc/ (2004) was so very prescient.