3 ms·
Does not work like that. The keys are signed by the vendor of the hardware. You are essentially paying for the hardware AND the signed keys within it. The serve
by no_time 5y ago
Does not work like that. The keys are signed by the vendor of the hardware. You are essentially paying for the hardware AND the signed keys within it. The server can choose to only trust vendor signed keys.
- Teknoman117 5y agoAnd how long until one of those vendor keys is compromised? Can't exactly revoke the signed key for everyone's hardware. All it takes is a single malicious actor or nasty breach at one of the issuing companies and it's all over. It doesn't appear to have been a big target thus far, but if we get to the point where companies are perma-banning devices, It's not hard to imagine those becoming target #1 for various blackhat groups.
- no_time 5y agoIt's probably a similar infra to root CAs that sign TLS keys. I don't recall a root CA compromise in recent memory.