4 ms·
> Widewine does not require a TPM and relies entirely on security by obscurity and it's considered good enough by the industry. Widevine's highest security lev
by comex 3y ago
> Widewine does not require a TPM and relies entirely on security by obscurity and it's considered good enough by the industry.
Widevine's highest security level, L1, does not rely on security by obscurity.
But it doesn't rely on a TPM either; rather, it relies on a trusted execution environment, like ARM TrustZone or Intel CSE[1], that is more highly privileged than the OS itself. Microsoft PlayReady is similar.
Apple FairPlay, in contrast, is worse: it's disabled if you turn off Secure Boot on Macs.
[1] https://www.intel.com/content/www/us/en/developer/articles/news/bring-premium-protected-content-to-chrome-os.html https://www.intel.com/content/www/us/en/developer/articles/n...
- immibis 3y agoAnd it relies on that TEE having a trusted operating system. How do you get that? Secure boot.