3 ms·
There's no advantage to your method vs programming the same wrapping key into both devices. As far as the site is concerned, these are the same device but with
by jiveturkey 8y ago
There's no advantage to your method vs programming the same wrapping key into both devices. As far as the site is concerned, these are the same device but with different counter streams.
I mean, yes the 2 devices can be initialized at different times, but otherwise it makes no matter.
- ecesena 8y agoIn my method no one knows the key. In the article, you have the key in an env variable. In particular, if someone prebuilds the keys for you, he/she has you key.
- jiveturkey 8y ago> In the article, you have the key in an env variable. Only during the moment of provisioning. > In particular, if someone prebuilds the keys for you, he/she has you key. You have a similar weakness. If someone prebuilds the keys, you don't know if they are loading a fixed key. You also have the problem of not knowing if the attestation cert is actually trustworthy, or where else the key for that cert might live.