Re:Fighting for the Open Web [image]
by Santosh83 on Sunday July 30, 2023 @03:39AM
(#36928798)
WEI is for controlling what software runs in the stack, from the bootloader upwards. Traditional secure boot gives assurances up to the kernel. WEI will extend it up to the browser. So more layers of the stack are secured from unauthorized modifications.
[ Parent
| on HN ]
Re:Fighting for the Open Web [image]
by realusername on Sunday July 30, 2023 @03:57AM
(#36928899)
You should not use the word "secure", it only checks the integrity, it doesn't guarantee any security, same as on Android. Same for "authorized" which is a bit misleading because only manufacturers can authorize modifications, not users.
Re:Fighting for the Open Web [image]
by userbinator on Sunday July 30, 2023 @04:27AM
(#36929087)
The same goes for the word "trusted" as it's often used, e.g. "trusted computing" and the like.
Who's doing the trusting? Not the users.
Re:Fighting for the Open Web [image]
by anonymous_sorry on Sunday July 30, 2023 @04:41AM
(#36929164)
Trusted is a warm and fuzzy sounding word. But always remember that in terms of security, trust is at best a necessary evil. Trust makes you vulnerable to abuse of that trust.
"Trusted" is not equal to "trustworthy".