zlacker

> The issue is when people and corps buy devices, they do not have effective root.

Totally!

The answer isn't to ban the tech, it's to ensure that everyone can set their own root if they so choose.

Want your system to only load firmware that's been signed by Debian to ensure that unfree blobs aren't sneaking in? Great! That's basically what we want too (s/Debian/our own supply chain integrity folks/g but same concept).

>>jauer+(OP)
The thing is, it's effectively impossible to politically guarantee that, so rather ban attestation than walk a fine line of 'your not allowed to do that'.