> What is bad is treating it as an unassailable fortress It's also a pretty bad architecture/design failure, for a TEE to share computational resources with un

> What is bad is treating it as an unassailable fortress It's also a pretty bad architecture/design failure, for a TEE to share computational resources with untrusted processes. I heard the decision to do so at Intel was due to marketing considerations outweighing the security concerns: Customers didn't want computational resources going fallow for the sake of security. I'm skeptical about whether a truly trustworthy TEE is possible, but it seems even less likely, given SGX's architecture.