Hacker News new | past | comments | ask | show | jobs | submit login

It would be beyond retarded to use the exact same key for every unit. That's not what people are asking for.

People are asking for keys to their exact units so they and only they can sign software for them.




While GP's snark is uncalled for, he is correct as that's exactly how this works. What you're asking for is like saying that a web server would provide a unique HTTPS cert to every distinct visitor.


>What you're asking for is like saying that a web server would provide a unique HTTPS cert to every distinct visitor.

It's not similar at all. The equivalent would not be the certificate but the session key, and you do get your own session key in order to prevent what the person above is describing. My HN session key is useless for decrypting your HN password even if I could intercept the traffic.

There is no technical reason why the devices can't ship with not only the manufacturer's public key, but also a key pair generated for each unit that comes off the assembly line for the customers to use to sign their own firmware images (and if they wish, delete the manufacturer's public key). But they will never be able to sign images for any device but their own because they simply don't have any signing keys that can produce a signature that will be accepted by any device but their own.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: