On Tue, 2022-03-29 at 14:38 +0000, Peter Robinson wrote:
> > > > > Can we get a link to the actual software stack being
> > > > > proposed?
> > > > > The link in this proposal is a marketing post ...
> > > >
> > > > Yes, that was an oversight, for reference:
> > > >
https://github.com/fedora-iot/fido-device-onboard-rs
> > >
> > > For reference it's under scope where I mentioned the
> > > implementation
> > > and clearly forgot to add the link.
> > >
> >
> > This is pretty neat! What kind of stuff can be done with this
> > onboarding system?
>
> It's designed to be small and straight forward, do one job securely
Where is the security part coming from ?
Does this require devices to be pre-registred/pre-seeded with some root
of trust?
Or is it TOFU ?
Or something else?