New answers tagged

6 votes

Where does the root of trust actually lie?

What you describe is a supply chain attack. And it is something relatively hard to protect from. what are some guidelines that individuals and organizations can follow to ensure they don't become a ...
user avatar
  • 17.4k
11 votes

Where does the root of trust actually lie?

The root CA list is not hardware-based (in the general case, see about the TPM below). It comes as a built-in feature of your operating system. Other software (e.g. browsers, mail clients, etc...) may ...
user avatar
  • 3,395
12 votes

Where does the root of trust actually lie?

My question is, what are some guidelines that individuals and organizations can follow to ensure they don't become a target of such an attack? One way to avoid being the target is to not do anything ...
user avatar
  • 10.8k
7 votes

Where does the root of trust actually lie?

TLDR: Check fingerprints of certificates on your device. All certificates, not only root ones, have fingerprints. These fingerprints are publicly known. If you have any doubts about certificates on ...
user avatar
  • 7,881
18 votes

Where does the root of trust actually lie?

My question is, what are some guidelines that individuals and organizations can follow to ensure they don't become a target of such an attack? The attack in the hypothetical example that you describe ...
user avatar
  • 19.3k

Top 50 recent answers are included