Trusted Execution Environment (TEE) support?

Platform Development
44

I still find it so hard to believe, that there is “really nothing worse than open source TEE solution”?
Why not? Your arguments make zero sense to me. We are not talking about Sony.

Of course you can keep the tin foil hats on, and think all security in the phone is bad. But can’t we consumers make that choice ourselves? If I can see the TEE kernel code on say this new upcoming Jolla phone, I’d be able to make the decision by myself if its good or not, and make apps with proper attributions. You can still opt out.

2 Likes
45

You are being inconsistent.

  1. You say you want a ‘secure store’. TEE is not that, it’s baked in hardware, you do not store anything in it. Mastercard, Sony, Google store keys in it.
  2. You say you want European auditing. TEE (and TPM) are all governed by Americans, so good luck.
3 Likes
46

“TEE (and TPM) are all governed by Americans”? Where did you get that one?

You are mixing tech with policy. Yes, on Apple yes. on Samsung - who knows? On ones sold to to the military its the US Mil, but the rest???

Google does not have unilateral access to Android TEE.

We should here, in Sailfish, create one TEE that is open source and verifiable.

5 Likes
47

Who are those “we” - as U see, no one really cares, but a small vocal minority of the spoiled by convenience like you.
Could you please stop?

In case U really DO need Tee, could you please migrate to the mainstream and stop expecting mainstream tech to be available here?

1 Like
48

I just don’t get this attitude - if our minority wants to “opt-in”, you want to deny it?

2 Likes
49

I went to each of the web sites of the bodies that govern the specifications. In each case, the funding and management of, even the ‘open foundations’ are not just sponsored but run by American companies. I’ve linked GlobalPlatform above and already talked about this.

I don’t think this is a discussion in good faith. I have actual experience with signing code and even advocate for it for distribution of Sailfish software. But the industry controlled TPM/TEE stuff is a backdoor and a lever in the wrong hands.

4 Likes
50

If the ‘lowest common denominator’ rules, then I wouldn’t be here in the first place. I’m going to ignore this thread until someone with actual knowledge responds with substantive contributions.

2 Likes
52

You’re right - not only you ain’t “getting it”, but actively DO refuse to comprehend the obvious logic behind:

It has been said - Sailfish and Jolla are not just an ordinary piece of hard and soft. They’re breath of fresh air, apart from all those mainstream pocket spy-tracking devices with a phone app on 'em installed.

But here you come expecting exactly that - a mainstream tech done by Google & Co on a system, where you’re ment to enjoy the lack of it!

P.S. Are you ok?

1 Like