3 ms·
I don't see the point in this at all. There's no way for software to authenticate what is and isn't a legitimate TPM, that's not how they work.
by nly 5y ago
I don't see the point in this at all. There's no way for software to authenticate what is and isn't a legitimate TPM, that's not how they work.
- londons_explore 5y agoLook up "device attestation". It basically let's software verify its talking to a hardware TPM made by a whitelisted manufacturer rather than an emulated TPM. All kinds of DRM schemes want to do that to be sure they can't be run in an emulator.
- nly 5y agoDevice attestation just proves you have realtime access to a legitimate device, and only makes sense where the other end of the transaction is trusted. Locally running software is never trusted. Its uses are mostly confined to authentication between corporate issued laptops and corporate VPN servers.