zlacker

Also there is no guarantee that "attestation" won't require your software to run on the physical hardware and not on a vm.

>>fsnipe+(OP)
True, but virtualization is big enough (including Microsoft's own Windows365 offerings) that passing "trust" down into VMs will be done. And with SEV there isn't even a way to tamper with things after the attestation process has been completed.