From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with archive (Exim 4.43) id 1MeAKl-0007Tk-6u for mharc-grub-devel@gnu.org; Thu, 20 Aug 2009 12:17:51 -0400 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1MeAKj-0007RP-1E for grub-devel@gnu.org; Thu, 20 Aug 2009 12:17:49 -0400 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1MeAKe-0007K8-Nf for grub-devel@gnu.org; Thu, 20 Aug 2009 12:17:48 -0400 Received: from [199.232.76.173] (port=60611 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1MeAKe-0007Jo-Do for grub-devel@gnu.org; Thu, 20 Aug 2009 12:17:44 -0400 Received: from xvm-190-8.ghst.net ([217.70.190.8]:41490 helo=aybabtu.com) by monty-python.gnu.org with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1MeAKd-0001Tm-U2 for grub-devel@gnu.org; Thu, 20 Aug 2009 12:17:44 -0400 Received: from [192.168.10.10] (helo=thorin) by aybabtu.com with esmtp (Exim 4.69) (envelope-from ) id 1MeAKb-0002nH-Nf for grub-devel@gnu.org; Thu, 20 Aug 2009 18:17:42 +0200 Received: from rmh by thorin with local (Exim 4.69) (envelope-from ) id 1MeAKa-0002n6-Bb for grub-devel@gnu.org; Thu, 20 Aug 2009 18:17:40 +0200 Date: Thu, 20 Aug 2009 18:17:40 +0200 From: Robert Millan To: The development of GRUB 2 Message-ID: <20090820161739.GC10903@thorin> References: <4A8BDB5B.5000407@labri.fr> <200908191425.29202.michael@gorven.za.net> <200908191524.42432.michael@gorven.za.net> <20090819140139.GA4210@thorin> <20090819195310.GE3561@mammon.mene.za.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20090819195310.GE3561@mammon.mene.za.net> Organization: free as in freedom X-Message-Flag: Worried about Outlook viruses? Switch to Thunderbird! www.mozilla.com/thunderbird X-Debbugs-No-Ack: true User-Agent: Mutt/1.5.18 (2008-05-17) X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6 (newer, 3) Subject: Re: TPM support status ? X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: The development of GRUB 2 List-Id: The development of GRUB 2 List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Aug 2009 16:17:49 -0000 On Wed, Aug 19, 2009 at 09:53:10PM +0200, Michael Gorven wrote: > On Wed, Aug 19, 2009 at 04:01:39PM +0200, Robert Millan wrote: >> Can you give a reason not to provide the owner with any of: >> >> - A printed copy of the private key corresponding to the chip he paid for. > > Not really, although not having any trace of the private key reduces the > chance of it being stolen. I find this point kind of moot though because > the chip can be reset completely -- you don't need the private key. Of course I do. How else am I supposed to tell this remote website that I am running Internet Exploiter without actually running it? It demands a signature that can only be produced with the private key that came preinstalled in the TPM. Resetting the TPM won't help at all. See where this leads to? -- Robert Millan The DRM opt-in fallacy: "Your data belongs to us. We will decide when (and how) you may access your data; but nobody's threatening your freedom: we still allow you to remove your data and not access it at all."