One thing I don’t see discussed is that there is a simple solution to keeping remote attestation while making it a security feature for the user instead of a DRM mechanism.
Owner override. The industry refused it when it was suggested over 20 years ago, they should be forced to implement it.
Another solution would be to ban the inclusion of a vendor EK, in that way turning the system into trust on first use. It would prevent tampering with an existing properly set up device, but it would allow the user to lie when signing up (for example for a banking app if the bank thinks your OS is not corporate enough).
In both cases this needs to be a legal ban, because even though protests managed to stop the initial full rollout of TC on PCs and WEI, once people forget it is way too lucrative for corporations to not try again slowly.
One thing I don’t see discussed is that there is a simple solution to keeping remote attestation while making it a security feature for the user instead of a DRM mechanism.
Owner override. The industry refused it when it was suggested over 20 years ago, they should be forced to implement it.
Another solution would be to ban the inclusion of a vendor EK, in that way turning the system into trust on first use. It would prevent tampering with an existing properly set up device, but it would allow the user to lie when signing up (for example for a banking app if the bank thinks your OS is not corporate enough).
In both cases this needs to be a legal ban, because even though protests managed to stop the initial full rollout of TC on PCs and WEI, once people forget it is way too lucrative for corporations to not try again slowly.
score 1 · canonical