4 ms·

I wished for the article to tell us how to set it up at least from a bi high level. I also think SSH certificate authentication mostly solves the “key comes fr

I wished for the article to tell us how to set it up at least from a bi high level. I also think SSH certificate authentication mostly solves the “key comes from anywhere” problem by automatically expiring certificates. This isn’t as immune to this type of attack as Secure Enclave, but you do get a benefit where the user has to get the correct certificate periodically in order to maintain access. If I pass my credentials and certificates to someone else or someone steals them, they’ll eventually expire. The impracticalities of Secure Enclave are obvious to all of us: recent Apple devices only.

analog_daddy 4mo ago
Not sure if this completely helps with the full setup aspect, however, I got introduced to secure enclave when i was researching a git app for iOS. The following app has, as one of its paid features that you can utilize secure enclave. Pretty cool app and pretty cool technology! https://workingcopy.app/ https://workingcopy.app/ The setup was a breeze! Did not try it with a server yet, but i don’t think anything would be radically different.