| ▲ | rstuart4133 a day ago | |
Fair enough. Sort of. You can get the same assurances OTP gives you using secure boot + open source + reproducible builds. Regardless the rest us who don't want to go through the extra work OTP creates still of use want to put our credit cards, fido2 keys, government licences, concert tickets and whatever else in one general purpose computing device so we don't have to carry lots of little auth devices. To do pull that off securely this device must have firmware I can not change. The OP wants to make it illegal to sell a device with firmware I can not change. In asking for that, they've demonstrated they don't have a clue how secure and opening computing works. If they somehow got it implemented it would be a security disaster for them and everybody else. | ||