News for hackers. Stuff that matters.

A comment on A privacy VPN you can verify. Parent comment

Re:A privacy VPN you can verify by MagicalTux on Friday August 15, 2025 @09:46PM (#44919339)
Similar to TLS, the attestation includes a signature and a x509 certificate with a chain of trust to Intel's CA. The whole attestation is certified by Intel to be valid and details such as the enclave fingerprint (MRENCLAVE) are generated by the CPU to be part of the attestation.

This whole process is already widely used in financial and automotive sectors to ensure servers are indeed running what they claim to be running, and well documented.

[ Parent | on HN ]
Re:A privacy VPN you can verify by stavros on Friday August 15, 2025 @09:48PM (#44919359)
That's very informative, thanks!
[ Parent | on HN ]
Re:A privacy VPN you can verify by kachapopopow on Saturday August 16, 2025 @12:26AM (#44920170)
Remember that this only works if the cpu can be trusted! The hardware still has to be secure.
[ Parent | on HN ]