Secure boot and attestation both generally require a form of DRM. It’s a boon for security, but also for control.

> Secure boot and attestation both generally require a form of DRM.

They literally don't.

For a decade, I worked on secure boot & attestation for a device that was both:

- firmware updatable - had zero concept or hardware that connected it to anything that could remotely be called a network

	▲	warkdarrior 4 minutes ago \| parent [-]
		Interesting. So what did the attestation say once I (random Internet user) updated the firmware to something I wrote or compiled from another source?