4 ms·
any legal entity can register their integrity attestation keys, with oversight by a bureaucracy in a process that takes 6 months and €100,000 That wouldn't be
by microtonal 2mo ago
any legal entity can register their integrity attestation keys, with oversight by a bureaucracy in a process that takes 6 months and €100,000
That wouldn't be great, but at the same time an improvement over the current situation.
attestation key that leaks into open circulation (such as FOSS) will be blacklisted in the registry because it no longer attests anything
Which makes sense if remote attestation is what you want.
- inigyou 2mo agoYes. It makes sense for well-regulated remote attestation. But is that what we actually want or do we want to destroy the concept altogether?
- JoshTriplett 2mo agoExactly. There is no actual value provided by attestation that banks actually need. Banks have websites that work in web browsers, and those typically provide 99% of the functionality of the app, and yet the app demands attestation.
- inigyou 2mo agoActually the new thing is that you need to verify your login with the app before you can log in to the website on a laptop.