zlacker

>>reacto+(OP)
Fork chromium and have it return true. Problem, websites?

>>freeon+Ia
It's signed?

Sure you can fake the results of an attestation in your fork, but your fork would be using your own key to sign the response, a key that the site can reject.

>>jabban+3c
Ah, we’ll also have to extract the key from chrome. It’s no worse than WideVine.

>>freeon+MC
Has that been extracted already? I have to admit I'm behind on the current state of browser DRM...

Also I wonder if in the future this would require attestation of the entire chain: secure UEFI validated by key burned in CPU, validates secure boot os that prevents "hacking tools", which validates secure Chrome, which attests secure websites...

Truly royally screwed at that point...