differences when using QvE and QvL in DCAP RemoteAttestation

[Toshi_O]

Hello.

Is there any difference in verifiable factors when executing RemoteAttestation with DCAP compared to Trusted verification using QvE and Untrusted verification using QvL?

[Scott_R_Intel]

Hello.

Using a QvE to verify a quote provides an SGX REPORT that can be used in local attestation to ensure the results were produce inside an SGX Enclave (QvE). The QVL results without the QvE Report could possibly be modified by an attacker between the QvL and the caller.

Regards.