3 ms·
So this looks better than the status quo, but is it really trustless? Couldn't OWS still be compelled to drop something in that walks & talks like this secure e
by sigil 9y ago
So this looks better than the status quo, but is it really trustless? Couldn't OWS still be compelled to drop something in that walks & talks like this secure enclave, but enables remote collection of address books? It seems we've just moved the trust down the stack into hardware.
Kinda depressed that we seem to have given up on the scalable Private Set Intersection problem. It's a hard problem but an important one for privacy-preserving social apps.
- tptacek 9y agoThe point of SGX is that the enclave is cryptographically verifiable. You can't simply emulate the enclave's software and interface; you also have to have the corresponding private key.
- rightos 9y agoSo is that key produced and provided by OWS? Or is it an Intel signed key? Either way, it's far from trustless, but it does provide a benefit in that if the initial setup was done correctly a compromise of OWS servers can no longer result in leaked contact hashes.
- hdhzy 9y agoThe key is created by Intel during CPU manufacturing process. Of course it's not trustless but it shortens the list of companies you have to trust. Running remote software and attestation that it indeed is what you think without trusting anyone can be... hard.
- deleted 9y ago[deleted]