Join Nostr
2026-03-18 19:20:15 UTC
in reply to

Daniël on Nostr: Centralized remote attestation is diametrically opposed to privacy, since it makes ...

Centralized remote attestation is diametrically opposed to privacy, since it makes projects vulnerable to pressure to weaken security & privacy, delay updates, etc.

AFAIK the support for remote attestation that is already provided in AOSP does not suffer from this issue, because there is not a single entity that enforces it (banks can whitelist signing key fingerprints).

So the only reason I can think of is control.