A privacy VPN you can verify

Re:A privacy VPN you can verify by MagicalTux on Friday August 15, 2025 @09:17PM (#44919143)

Intel audits configuration on system launch and verifies it runs something they know safe. That involves CPU, CPU microcode, BIOS version and a few other things (SGX may not work if you don't have the right RAM for example).

The final signature comes in the form of a x509 cerificate signed with ECDSA.

What's more important to me is that SGX still has a lot of security researchers attempting (and currently failing) to break it further.

[ Parent | on HN ]

Re:A privacy VPN you can verify by junon on Friday August 15, 2025 @10:09PM (#44919502)

Depends on your threat model. You cannot, under any circumstance, prove (mathematically) that a peer is the only controller of a private key.

Again, I would love to know if I'm wrong.

The fact that no publicly disclosed threat actor has been identified says nothing.

[ Parent | on HN ]

Re:A privacy VPN you can verify by doublerebel on Saturday August 16, 2025 @02:57AM (#44920915)

Proving a negative that information has not been shared has been a challenge from the beginning of information.

Are you suggesting a solution for this situation?

[ Parent | on HN ]

Re:A privacy VPN you can verify by pydry on Saturday August 16, 2025 @11:49AM (#44924490)

In this case it's rather like trusting that a government issued private key has not been stored by the government for further use.

[ Parent | on HN ]