3 ms·
I was sceptical of the announcement, but this actually sounds really well thought out. One key part though will be the remote attestation that the servers are
by solarkraft 2y ago
I was sceptical of the announcement, but this actually sounds really well thought out.
One key part though will be the remote attestation that the servers are actually running what they say they're running. Without any access to the servers, how do we do that? Am I correctly expecting that that part remains a "trust me bro" situation?
- wyes 2y agoAttestation will run on the RoT. >While we’re publishing the binary images of every production PCC build, to further aid research we will periodically also publish a subset of the security-critical PCC source code. I expect that they'll publish the attestation source code. But, basically what will happen is the Verifier will request a certain memory region to be attested, then that region will be hashed and the digest will be sent back to the Verifier. If the memory is different from what is expected, the hash digest will NOT match.
- deleted 2y ago[deleted]