How does this attestation work? How can I be sure that this isn't just returning the fingerprint I expect without actually running in an enclave at all? Does Intel sign those messages?
This whole process is already widely used in financial and automotive sectors to ensure servers are indeed running what they claim to be running, and well documented.