Trust is not a security property. It’s what systems fall back to when verification is impossible.

Most software still works this way, but regulatory frameworks are shifting expectations toward traceability and transparency, not just security claims.

We wrote about what changes when systems become verifiable: https://caution.co/blog/on-transparency.html

#SelfPromo #Security #VerifiableCompute #ConfidentialCompute

Secure enclaves are still underused, and many #confidentialcompute deployments amount to security theater.

Most platforms can attest that something hasn’t changed, but not what code is actually running, since PCRs can’t usually be reproduced from source.

Relying on a single vendor’s attestation engine also creates a real single point of failure.

Isolation and attestation without reproducibility or platform diversity isn’t sufficient for high-security systems.

#verifiablecompute #security

Jeremi Piotrowski talking on "The Next Episode in Workload isolation" and #ConfidentialContainers

https://github.com/confidential-containers/community

#KubeCon #KubeConEU #KubeCon23 #ConfidentialCompute #Containers