fox

Public Key

npub1wlz7m48jk52wsesrkzhfjhr28gkvw0me3we4yp7zrk3d2wzynp6qzaz68j

NIP-05 Address

pixelsfanryo@mastodon-social.mostr.pub

Profile Code

nprofile1qqs8030d6net298gvcpmpt5et34r5tx88auchv6jqlppmgk48pzfsaqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds7uvcek

Publishing to

offchain.pub

relay.damus.io

nos.lol

Author Public Key

npub1wlz7m48jk52wsesrkzhfjhr28gkvw0me3we4yp7zrk3d2wzynp6qzaz68j

Show more details

Last Notes

2026-03-09 19:50:22 UTC

- reply

@nprofile…8d0p If that is the case, then IMO uattest is actually better. A CA like uattest, as bad as it sounds, will probably be more amenable to allowing reasonably secure alternative OS like LineageOS. You only need to persuade one entity. While if each app gets to decide then you have to convince each dev, bank, gov to allow your OS. That doesnt sound very practical. And the uattest proposal can be implemented right now on most devices while most devices dont have a security chip at the moment.

2026-03-09 19:23:11 UTC

- reply

@nprofile…8d0p So if Im understanding this correctly, what GOS wants is for apps to use an API that will interface with a hardware chip like the titan m2 and will report that the bootloader is locked etc and also report the signing key to apps? Then it would be up to the app to trust that key (which necessitates an allowlist of sorts maintained by apps individually). Is my understanding correct?