We're still quite some way from practical homomorphic encryption [0] which would allow devolved trust to untrustworthy actors (like hardware owners at remote cl

We're still quite some way from practical homomorphic encryption [0] which would allow devolved trust to untrustworthy actors (like hardware owners at remote cloud sites). But don't hold your breath. Everything else along the way is a whack-a-mole because it depends on TPM/HSM enclaves. There are many reasons not to trust these now, including buffer overflows and compromised elliptic curve cryptography. Far better to design hybrid cloud and on-prem that keeps sensitive data where it belongs... on your own computer. [0] https://en.wikipedia.org/wiki/Homomorphic_encryption https://en.wikipedia.org/wiki/Homomorphic_encryption