SocPup on Mythryl: “People choose to give up their digital freedom in exchange for what…”

For any type of attestation there will always be "trusted" agents. Think what happens when hardware devices are lost, stolen or compromised in any other way. Hardware attestation always implies vendor lock in whereas software attestation could be more easily migrateable between hardware suppliers.

GrapheneOS@grapheneos.org

Apple and Google are gradually expanding their use of hardware-based attestation. They're convincing a growing number of services to adopt it. Google's Play Integrity API and Apple's App Attest API are very similar. Apple brought it to the web via Privacy Pass, which Google intends on doing too.

Post