Comment by chmod775

You do not have to trust the device if you can verify the information it provides, either cryptographically or by checking with an authoritative trusted server.

> governmental level of trust

This made me laugh out loud. Not because it's a meaningless phrase (where does "governmental" rank on a scale of fully to least trusted?), but because it seems to imply that governments do not have a miserable track record when it comes to IT security.

Though I suppose considering a security model sound because it uses security through obscurity like a blackbox integrity check would be very... governmental.

Does that mean "govermental level of trust" ranks somewhere between "snake-oil" and "cope"?