2 ms·
Solving the key-leaking issue is usually done by having a unique per-device key in the HSM, and having an online database that can be checked for authenticity.
by rcxdude 3y ago
Solving the key-leaking issue is usually done by having a unique per-device key in the HSM, and having an online database that can be checked for authenticity. Then cloning a device requires pulling out an HSM, and if you do sucessfully pull the key off that it becomes suspicious that many different devices have the same key, and it can be blacklisted. This is what google uses (anticompetitively, in my mind) to force people to use geniune chromecasts.
- JCharante 3y agoOh that seems like a smart way to prevent against key cloning. This seems quiet sound, although we don't live in a perfect world so I doubt we'll see this come until something bad happens like consumers losing faith in online purchases not being fakes or infamous fires resulting from "unlicensed" chargers.