Comment by mschuster91
8 days ago
Every iPhone, every supported macOS device, all Windows machines capable of running Windows 11 and all mainstream Android devices capable of running Netflix have a Secure Enclave of some sort capable of doing remote attestation, and for virtually all of them, Secure Boot providing the foundation for it is enabled and enforced.
It just took a decade worth of waiting after the first failed attempt by MS to push TPM support.
The only device categories where Secure Boot and Remote Attestation are either disabled, unsupported or not usable for the purpose of trusted attestation are many Linux systems and Android devices not sanctioned by Google.
No, Apple used to support passkey attestation on iOS, but has since removed that feature. The same is true for macOS. Android still supports it, but not for synchronized passkeys as far as I know.
Not sure how DRM factors in here; it's a completely different problem space. Or is your stance something like "anything even theoretically capable of performing trusted computing is evil"?
Okay, so it’s possible, but Google is not doing it correctly yet, so they won’t be doing it ever despite the fact they have all the incentives to do so?
I think you got it the wrong way around. Apple has abandoned attestation, Google still supports it.
1 reply →
If they had it and then removed it, what's stopping them from adding it again?