2 ms·
"Shipping the private key" does not meet the bar for "good". You still need a way to establish trust in your key distribution and also implement the system cor
by mulmen 2y ago
"Shipping the private key" does not meet the bar for "good". You still need a way to establish trust in your key distribution and also implement the system correctly. The proper way to secure access to a physical thing you own is to only communicate directly with that thing.
- amluto 2y agoThis is ridiculous. It would take heroic effort for VW to prevent themselves from silently uploading malicious firmware to VW cars. There are ways to do this, but it’s also a separate problem from the problem that should actually be solved here.