3 ms·

And that Software TPM has whos vendor endorsement keys exactly? Ah yes, ones that google won't consider valid.

• gjsman-1000 1y ago
  Well, it's a good thing Device Bound Session Credentials (DBSC) as proposed here has no way to actually send said endorsement key anywhere; rending the objection irrelevant. The TPM is only for secure storage as verified by the browser itself, not the website being visited.
  • IlikeKitties 1y ago
    [flagged]
    • gjsman-1000 1y ago
      > You all don't understand how any of this tech works but you think you do. We do; and it is specifically called out in the spec that the certificate chain is not submitted, due to the potential for overpowered fingerprinting. As such, this battle, should they make a move to change that, needs to be fought a different day. Fighting against hypotheticals is pointless. Edit: For the pedantic, fighting against hypothetical things that they could do if they invented something that doesn't exist right now, is pointless. Edit 2: You can't boil a frog without ecosystem cooperation. The internet isn't going to bow to inconsistent adoption. They already made it clear with WEI they have no interest.
      • pessimizer 1y ago
        > Fighting against hypotheticals is pointless. No, fighting against things that have already happened is pointless. We only ever fight against hypotheticals. We fight to avoid something happening that has not happened.
      • IlikeKitties 1y ago
        [flagged]