Przemek Klosowski via devel wrote:
3) Multiple keys allow creating backup keys, preventing the data
loss
scenario Kevin is worried about. Of course this assumes that the UX for
creating backup keys exists, and that people actually do that---but it's
possible in principle.
The backup key is useless in that scenario if you cannot export it to
another TPM, and isn't preventing such an export the whole point of the TPM
technology?
Kevin Kofler