3 ms·
Code-signing is a useful and necessary security measure, so long as it is possible for the owner of the device to sign his own code. You need a good way to dist
by superuser2 11y ago
Code-signing is a useful and necessary security measure, so long as it is possible for the owner of the device to sign his own code. You need a good way to distinguish between the end-user and someone who has pwned him.
- mindslight 11y agoIMHO a well-documented JTAG, USB, or serial interface on the board to change the trust root would suffice. If you wanted to prevent evil maid attacks, then a time lock would actually be more secure than a fixed trust root with respect to downgrade attacks and leaked keys.