Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

IME lack of adoption is more due to lack of tooling and integration with popular languages and libraries.

Also, the domains that have the most to benefit from SGX (heavily regulated ones like healthcare) tend to be very slow adopters of new technology.

I guess there is definitely some level of concern for sidechannel attacks, given Intel's track record, but I don't think that's whats been holding back adoption.



It also requires a very expensive license from intel, and to allow them partial control of your code via codesigning.


No it doesn't. Getting a whitelisted code signing key just requires you to agree that you won't distribute malware. You pay nothing for it and Intel don't see the code you sign. Please don't make things up because they "sound right".


Are there non-Intel remote attestation servers now?


Only Intel know what chips they've manufactured and what microcode patch levels are currently considered secure, so that wouldn't make much conceptual sense. But the new DCAP feature lets you run some of the RA infrastructure yourself, yes.


How could healthcare benefit from SGX?


Strengthened protection for patient data.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: