Matter.js strengthens the checks a controller uses to decide whether a device’s identity and certification evidence can be trusted during pairing. Its default policy refuses certification declarations from unknown signers and certificates that violate the required device profile.
Ingo Fischer adds built-in trusted signing keys so a controller can check known certification signatures without an internet connection. A signing certificate fetched from the online ledger must still prove that the Connectivity Standards Alliance issued it.
Applications built on the library can supply their own policy for handling failed checks. These changes concern the controller library; they do not establish availability in a particular Home Assistant release.