this post was submitted on 10 Oct 2025
97 points (100.0% liked)
Linux
10014 readers
514 users here now
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Unlike many Linux users, I really liked the idea of the TPM. So long as I fully control the keys, integration with a security chip to authenticate my system would be a nice bonus and represents a natural extension to secure boot. We already take this approach in principle with smartphones.
On the other hand, it's becoming a lot harder to actually own your devices and run code of your own choosing on smartphones. It's a tool that so far has generally been used to serve the interests of the vendor over the user.
It would be a fine system if the keys were stored on the encrypted volume that the TPM decrypts