Confidential computing's core trust mechanism is broken. The fix may not exist
3 points by manwithaplan
by manwithaplan
0 subcomment
> "We believe post-handshake attestation alone can achieve level three binding," Sardar told The Register, warning that newer proposals combining both approaches add unnecessary complexity without adding security. His recommendation to the IETF's TLS working group is blunt: developers should abandon intra-handshake attestation altogether.
Hacker News