3 ms·
This is great, and I'd like to see generic hardware support for signing across OSes and programs. I guess FIDO2 is the closest we have to that right now, but th
by StavrosK 6y ago
This is great, and I'd like to see generic hardware support for signing across OSes and programs. I guess FIDO2 is the closest we have to that right now, but that's rather application-specific. Still, that might be a strength rather than a weakness (I'm not readily sure if the keys transfer from, say, one computer to another), and I'd like to see it proliferate more.
- upofadown 6y agoFIDO2 is just for authentication, isn't it? This is for signing in the hardware enclave. For that there are standards like S/MIME and OpenPGP that can run in the enclave.
- StavrosK 6y agoIt lets you sign a token to authenticate (which is its primary purpose), I'm not sure off the top of my head if it can't also be used to sign arbitrary data...