Re:How the Xbox 360 knows if your hard-drive is genuine
by transpute on Wednesday January 25, 2023 @12:41AM
(#34514834)
> they're not going to be satisfied because they're trusting their own, and not yours.
This cuts in both directions. Unlike certificates, attestation is not a zero-sum fight over a single monolithic measurement attribute that can only be A or B, it can support a goal of having A and B, e.g. as disaggregated VMs. If a cloud wants subset B, then the user/owner/enterprise local attestation can insist that the client must have subset A, otherwise it can reject subset-B-without-A.
This cuts in both directions. Unlike certificates, attestation is not a zero-sum fight over a single monolithic measurement attribute that can only be A or B, it can support a goal of having A and B, e.g. as disaggregated VMs. If a cloud wants subset B, then the user/owner/enterprise local attestation can insist that the client must have subset A, otherwise it can reject subset-B-without-A.