Oddbean new post about | logout
 nostr:npub12jkyefx8vfp0mnmqkszjkzm6m8932t8nrjmejucg5auqvzjvu4rqqeuvhg nah, what the tpm stuff enables you to do is certainly non-interactive secure bootups. Which is great for embedded and server systems. I.e systems that have noone sitting in front of them who could type in a pw. But it is also good in case you want interactivity on unlocking: you can combine the tpm/pcr stuff with a password so that you get the guarantees the tpm is supposed to give you about hw and sw state *and* the benefits of a password stored in your brain if you want.