4 ms·
This never made any sense to me for consumers. Enclaves and confidential compute are about the owner of the physical device giving up power and handing it to a
by bjackman 1y ago
This never made any sense to me for consumers.
Enclaves and confidential compute are about the owner of the physical device giving up power and handing it to a remote entity.
In the case of SGX on consumer hardware that usually meant consumers giving up power to Netflix or whoever via DRM bullshit.
On the other hand, TDX on server devices is mostly about cloud providers giving up power to their users. This is a fundamentally better use case for TEEs. So overall this makes sense to me.
Kinda annoying that this stuff is so complicated that they have to leave it out of cheaper parts but that also makes sense, this must be incredibly invasive stuff that increases the cost in so many areas.
- lostmsu 1y agoIt could have been used for a distributed cloud over consumer hardware.
- bjackman 1y agoThat would be a neat usecase but it's not a slam dunk. TEEs in theory eliminate the need for the user to trust the owner of the hardware. But for a cloud you need to eliminate the other direction too. Cloud companies achieve this by... Spending a LOT of money on it. And the technical project of doing that is easier, because they control the whole host stack. I'm not sure it's technically feasible to achieve that in an environment where the host also needs to also support stuff like running Steam! But still, maybe if you constrained the requirements enough it could be possible, it would have been a really cool thing to try!