Hacker News new | past | comments | ask | show | jobs | submit login

If you are suggesting solutions based on immutable hardware keys and certified chain of custody from the manufacturer,I have to ask if you understand what TOR is.



In OP's defence, there might be a fully anonymous way to achieve attestation. Related: https://privacypass.github.io/


That method seems closer to PoW (as is being done by TOR) than attestation.

The strongest privacy guarantee I've heard behind attestation is it would require two parties to collaborate to break it. If Google attests to a Cloudflare protected site, they can determine who you are by cooperating.


There are ways to do the verification with cryptography that would preserve anonymity and wouldn't allow messages to be tied to public keys. I find condescending ignorant responses like yours highly annoying. One way to respond to people in the future is to start with the assumption that the person isn't a fucking idiot.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: