Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard

Re:Apple, Google and Microsoft Commit to Expanded Support fo... by lxgr on Friday May 06, 2022 @09:02AM (#31284609)

But there isn't a compromise.

You can use the "smartcard part" of a TPM. This gives you secure/non-extractable key storage.

You can use the attestation/trusted computing part of a TPM. This gives you trusted computing, which can be used for DRM, if you install software or use a service using DRM and grant it access to your system. If you don't like that, just don't do that. (Today's DRM solutions don't even use TPMs anymore, for what it's worth.)

If you want/need neither, just use neither!

[ Parent | on HN ]

Re:Apple, Google and Microsoft Commit to Expanded Support fo... by raxxorraxor on Friday May 06, 2022 @09:41AM (#31284963)

If everyone were forced to use TPM it probably would still be used as a DRM mechanism. My problem is with enabling the usage in the first place whereas I only have negligible security improvements.

The only think that kept DRM from leveraging it was indeed the low usage in consumer spaces.

[ Parent | on HN ]