F04-CX: Yes
Rationale
For signed Content Objects, KeyId is a hash of the producer public key and signature validation binds that key to the object. This cryptographic producer reference is independent of the forwarder locator from which the content arrives.
Assessment method
Documentary capability and suite review; no runtime execution
Source context
Primary HIP/CCNx specifications and unchanged selected profiles
Outstanding qualification
The consumer must validate the signature against its selected trusted key. A content name alone is not self-certifying, and producer authentication does not authenticate the live forwarding peer or the consumer.
Public sources
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round254-sources.json
- round246.html