• ours@lemmy.film
    link
    fedilink
    English
    arrow-up
    1
    ·
    9 months ago

    It allows Windows to create and store cryptographic keys and validate OS and firmware components haven’t been tampered with.

    • ddkman@lemm.ee
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      9 months ago

      Okay, how is that inherently useful? All any form of trusted boot does is make sure, that the OS is whatever the manufacturer approves. If that is an outdated image full of backdoors and exploits, than that is what the TB enforces. TECHNICALLY a phone on android 2 is secure (by this logic) because the TB enforces that awfully outdated image. All trusted boot is good for is to make sure you can’t run acutally secure software on your device