Device attestation is how you can use private keys you don't actually have access to. It has a lot of value to literally anyone who wants to store tokens or use one time authentication codes. Linux folks need to implement the full stack and offer an open alternative to payments, secrets, and tokens. In the age of LLMs there is no excuse. It is annoying as hell that I can't buy a System76 or Framework laptop with a fingerprint sensor but a Lenovo comes with one that works on Linux perfectly.

▲

dingaling 3 hours ago | parent | next [-]

"Device attestation is how you can use private keys you don't actually have access to."

Read that phrase back and then ask "is this the future of computing that we wanted?"

The likes of passkeys, essentially user-hostile ssh keys that live on your device but aren't accessible by you, would have been an unbelievable dystopia to us in the 90s.

"Linux folks need to implement the full stack"

Nah it's fine thanks, I'd rather opt out of corporate serfdom than compromise my principles.

	▲	hparadiz 3 hours ago \| parent [-]
		That's just your opinion. Has nothing to do with Linux. And yes I would like a device like a soldered in tpm device that can generate private keys and verify signatures signed with the public key. Your misunderstanding of the technology not withstanding it does appear to me to be quite a valuable technology since it's in basically every computer these days. Stop speaking for Linux.

▲

sophrosyne42 4 hours ago | parent | prev [-]

Framework has a fingerprint sensor. [1]

[1] https://frame.work/products/fingerprint-reader-kit?v=FRANTD0...

	▲	jeroenhd 3 hours ago \| parent \| next [-]
		Lots of laptop vendors do. Very few integrate fingerprint scanners into any kind of secure authentication flow, though. There are decent fingerprint drivers for various brands, but connecting fingerprints to authentication beyond basic login requires manual setup. You don't actually need biometrics to use key material, that's what (f)TPMs are for. They're not set up to be usable out of the box in any Linux distro I've tried, though.
	▲	hparadiz 3 hours ago \| parent \| prev [-]
		It needs to come stock on every Linux laptop from now going forward period. Like you expect a screen to come with your machine. Every Mac has one now and I'm not going back to typing my password in every single time.