zlacker

>>sschue+(OP)
Do you want desktop PC vendors locking down hardware to enforce integrity?

>>nicksl+Zd
I don't want integrity on my mobile so why would I want it on my desktop?

>>realus+0p
Exactly, remote attestation is only acceptable on your own devices with remote attestation servers that you control.

For example, it would be completely fine to implement remote attestation where devices issued by companies to employees verify their TPM values with company's servers when connecting via VPN.

All other such activities directly infringe on ownership rights.

>>zekica+kt
I don't see the value of remote attestation period. Especially when we talk about the mobile world which is a jungle where even the manufacturer itself doesn't have the full picture of all the code running on the device.

Yeah sure it's guarantees that the device is more or less similar as from the factory... and then what? What am I supposed to do with that information?