4 ms·
That's the whole point of a TKey as a security device: the secret available to an application depends on both the device it's running on and the application, an
by FiloSottile 3y ago
That's the whole point of a TKey as a security device: the secret available to an application depends on both the device it's running on and the application, and can't be extracted, so you can do things like "sign a blob only if it follows these rules" and enforce it in hardware. If the device wasn't locked, you could just... change the rules.
How is that not a legitimate form of security?
- josephcsible 3y agoIf it's my device, then I should be able to change the rules.
- kfreds 3y agoYou're more than welcome to change the rules. Please read my other comments in this thread, and you'll hopefully find answers to your concerns. The TKey Unlocked gives you all the control you're asking for.
- teruakohatu 3y agoIf you can change the rules then someone else can also change the rules. And any ability to change the rules will greatly increase the surface area of attack.