> how do I know it's actually running inside the enclave, and not an ordinary process sending a hardcoded expected fingerprint?
It's signed by Intel and thus, guaranteed to come from the enclave!
It's signed by Intel and thus, guaranteed to come from the enclave!
What if, for example, a three-letter agency seized keys from Intel, served them with a gag order to prohibit disclosure of the seizure, put themselves in the middle of the network path between you and the user, and modified the server software to send falsified signatures derived from those seized keys?