3 ms·
Can’t this argument be made for nearly all implementations of cryptography? I trust Metamask and 1Password and Meta with their claims of not sending my secret
by EGreg 3y ago
Can’t this argument be made for nearly all implementations of cryptography?
I trust Metamask and 1Password and Meta with their claims of not sending my secret keys to their servers. Just take their word for it!
I trust Apple with their claims about the “secure enclave”
I trust Google with their claims about Chrome not “phoning home” all my keys
I trust Intel with their SGX extensions (and Signal does also)
I trust AWS with their KMS (“key management service”) and so does Magic crypto wallet etc. and even “the experts” like tptacek tell is “just use AWS”
If we ran the national elections electronically, then in theory, Google or Apple could defraud millions of voters into recording incorrect votes and help steal the election.
Our hardware is made by only a few companies. They could have put all kinds of backdoors.
I am not going to go so far as to say the NSA promoted weakened EC2 crypto curves, but I guess it’s possible
But in general, everyone has a Trusted Computing Base:
https://en.m.wikipedia.org/wiki/Trusted_computing_base https://en.m.wikipedia.org/wiki/Trusted_computing_base
Which is why I don’t want to rely on individual devices for security. I prefer a blockchain and having multiple devices secure data.