4 ms·
By that same logic evil is not inherent to attested bootchains either. When used to verify that the computer loaded the OS that the end user expected it is a ve
by fc417fc802 2y ago
By that same logic evil is not inherent to attested bootchains either. When used to verify that the computer loaded the OS that the end user expected it is a very powerful security tool. It is only bad when the keys aren't under the control of the device owner.
- lxgr 2y agoYou're mixing up the authentication and attestation parts of secure boot here. You can absolutely install Linux, run secure boot (e.g. to protect you against "evil maid attack"), use your TPM to store your SSH keys, and live a happy and attestation-free life. You can also do other things, but if you don't want to, why would you?
- fc417fc802 2y ago[dead]
- ethbr1 2y ago* If permitted by the device manufacturer