MobileWalletReaderTrustEvaluator

Application trust policy for a cryptographically verified Annex C reader certificate chain.

The chain's internal signatures and the reader's COSE signature over the session-bound payload are already verified before this is called, so the only question left is whether the application recognises this reader as one it will name to the user. The wallet cannot decide that, which is why an unconfigured wallet answers MobileWalletReaderTrust.Untrusted.

Inheritors