3 ms·
> Can't be just any device, because the chain of custody is as strong as its weakest link I don't quite understand what you mean. We already trust phones and c
by Asraelite 4y ago
> Can't be just any device, because the chain of custody is as strong as its weakest link
I don't quite understand what you mean. We already trust phones and computers not to be compromised for things like online banking, so why not allow these devices to sign recordings using keys lent to them by the main trust device? You could allow revocation of these keys.
- TeMPOraL 4y ago> We already trust phones and computers not to be compromised for things like online banking Sorta, kinda. "We already trust phones and computers" because we have no better alternatives yet. There's a reason online banking is at the front of the push for device attestation, and thanks for Google happily obliging, rooting your Android phone is pretty much pointless now. This is coupled with a parallel push to do your banking through a mobile app, or at least to use it as a second authentication factor, which makes the app necessary just as much. This means we're already undergoing the transition I'm talking about: in the nearby future, you'll have to use a pristine, unrooted, unmodded phone from a blessed corporate vendor, to perform basic functions like paying for things and managing your account. And yes, such device will be appropriate for signing everything else too - and the vendor owning the key will be your Trust Authority.