Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You are trying to portrait it as an exchange between equal parties which it isn't. I am totally entitled not to have to use a thrid-party-controlled device to access government services. Or my bank account.


remote attestation is just fancy digital signatures with hardware protected secret keys. Are you freaking out about digital signatures used anywhere else?


Trusted computing boil down to restricting what software I'm allowed to run on hardware I own and use. The technical means to do so are irrelevant.


"Trusted computing boil down to restricting what software I'm allowed to run on hardware I own and use." Remote attestation doesn't do this.


It absolutely does. Emphasis on use. The last thing I need is my bank requiring me to use a Poettering-certified distribution because anything else is "insecure".


You are acting very entitled thinking you can dictate the conditions under which you can connect to other people's computers. This is a "it takes two to tango" situation. I'm sure YOU would refuse to connect to any bank that refuses to use TLS.


No man, there is no tango. "It takes two" doesn't apply when one part is a huge corporation.


BOTH parties have to agree on the conditions under which the computers will connect and EITHER can reject them.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: