4 ms·
So the core problem is that when something is running on someone else's server, you can't even verify what they're running. E2E encryption avoids that by not t
by Scene_Cast2 6y ago
So the core problem is that when something is running on someone else's server, you can't even verify what they're running.
E2E encryption avoids that by not trusting whatever is running on the servers
Local DBs avoid that by not giving up local data.
However, it would be quite interesting to have a way to remotely know that a certain service is running the code you think it's running.
- jaywalk 6y ago> it would be quite interesting to have a way to remotely know that a certain service is running the code you think it's running. It sure would, and it would be a hell of a discovery if someone could come up with it. Because I sure can't think of a way that I can't easily debunk.
- Scene_Cast2 6y agoIntel has done some work on this front that can hypothetically be used this way, but I wouldn't say it's practical, for various reasons.
- DSingularity 6y agoYou mean like intel TXT remote attestation?
- Scene_Cast2 6y agoThe trick here would be integrating that to play nicely with load balancers, REST-style APIs, and reducing overhead from establishing yet another secure connection.