3 ms·
Secure boot doesn't require disk encryption of any sort, that's simply a common additional feature that the RPi happens to support. Being able to change the pub
by AlotOfReading 4y ago
Secure boot doesn't require disk encryption of any sort, that's simply a common additional feature that the RPi happens to support. Being able to change the public keys without a verified key update inherently violates the ARM security model here.
- dingledork69 4y agoThat's only relevant for device manufacturers who want to prevent the device owners from controller their hardware. This is evil and not a use case worth supporting. Normal users care about secure boot because it protects their disk encryption.
- joezydeco 4y agoI'm the IoT node design space and this is what we use. There is no sales or use case to repurpose the device one it's at the end of life, and we don't want people to do as such. The point of secure boot is to make sure it's only our firmware running, and only our firmware connecting to our backend with the appropriate keys. Anything else is a security nuisance at best and an company killing problem at worst. We're willing to sacrifice the SoC in those cases. Your mileage may vary.
- dingledork69 4y agoFirst, you should never trust the client. Second, you're creating e-waste when you go out of business. This is not something that should be legal.