thomashabets

3 ms·

1. 1.▲
   by thomashabets 13y ago

   You obviously don't work for Google.
2. 2.▲
   by thomashabets 13y ago

   Yes, you either generate the key on the TPM chip (for SSH authentication, that would be one per user), or you generate it in software and "import" it. I've clarified how it works here: http://blog.habets.se/20
3. 3.▲
   by thomashabets 13y ago

   GnuTLS can't be a PKCS#11 provider, so no.
4. 4.▲
   by thomashabets 13y ago

   > Neat, if you disregard the (justified? unjustified?) widespread suspicion of TPMs. Most of the TPM fears are about its secure booting features, about locking in a machine to a certain OS or DRM code. This isn't using those feature