| ▲ | foltik an hour ago | |
Not sure if you’re being deliberately obtuse, but a signing key means nothing by itself. What exactly do you think is being attested TO? Thats right: that the user can’t do what they want with their own device. Obviously your key wouldn’t be trusted if they could. There is no other conceivable purpose that attestation could serve. | ||
| ▲ | dns_snek an hour ago | parent [-] | |
> Not sure if you’re being deliberately obtuse Yes, they are. If there's a thread on HN about user-hostile features, you can be pretty confident that they've written a comment defending it. | ||