Verifying device and application integrity

A client device comprising:

• one or more processors;
• and
• one or more computer-readable media storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• obtaining, by the client device, one or more trust tokens from a trust token system, wherein each of the one or more trust tokens are generated by the trust token system using a nonce received from the client device, and wherein the nonce for each trust token of the one or more trust tokens comprises a blinded nonce that is blinded using a blind signature scheme;
• sending, by the client device and to the trust token system, a redemption request to redeem a trust token, the redemption request comprising the trust token and a public key of a domain to which a communication is being sent by the client device;
• receiving, by the client device and from the trust token system, a signed redemption record comprising a set of data comprising the public key of the domain and a digital signature of the set of data;
• and
• sending, by the client device, the communication with the signed redemption record to a computer of the domain.

One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• obtaining, by a client device, one or more trust tokens from a trust token system, wherein each of the one or more trust tokens are generated by the trust token system using a nonce received from the client device, and wherein the nonce for each trust token of the one or more trust tokens comprises a blinded nonce that is blinded using a blind signature scheme;
• sending, by the client device and to the trust token system, a redemption request to redeem a trust token, the redemption request comprising the trust token and a public key of a domain to which a communication is being sent by the client device;
• receiving, by the client device and from the trust token system, a signed redemption record comprising a set of data comprising the public key of the domain and a digital signature of the set of data;
• and
• sending, by the client device, the communication with the signed redemption record to a computer of the domain.