The Tragedy of the Oxide Root of Trust

I have spent a significant portion of my career focused on helping folks securely manufacture, deploy, and manage the lifecycle of connected devices. I don’t think it would be an overstatement to say that my professional mission in life is to dramatically improve the status quo of device security. I recently changed jobs in service of that mission. While there is a fair amount of essential complexity in Public Key Infrastructure (PKI), which underpins many of the components of a secure device, a significant reason why securely manufacturing devices is so hard is because no one talks about it.

Commenting on Bubbles has been removed. Why? If you want to talk about this post, write to the author, use the comments on their blog if it has them, or reply with a "RE:" post on your own blog. Suggestions? feedback@bubbles.town