3 ms·

This is fundamentally incompatible with software updates. The keys must not just never leave the device, both the key distribution and what the software does wi

This is fundamentally incompatible with software updates. The keys must not just never leave the device, both the key distribution and what the software does with decrypted data must be locked as well. Which means it must be impossible for the software to update, as the government could use force to compel a company to hack it's own users. This means that the cloud model, where code is downloaded through a web browser, is right out. Regardless of where the keys are.

runnerup 3y ago
> as the government could use force to compel a company to hack it's own users. Currently, in the USA, the most generally accepted view among legal scholars is that this is not legal for the government to do -- mainly because of a view that it's a particular form of compelled speech / forced labor which is unconstitutional for the government to compel. It is, however, an avenue that the law enforcement community does occasionally investigate as a possible route to get what they want. There's no clear court ruling as no cases have gone that far.