We've talked about Oxide's Root of Trust--the hardware underpinning the security of the product--but how do we keep a bad actor from spoofing Oxide to load malicious software? Philip Tricca joined Bryan and Adam to describe the key ceremony, the process of creating and storing the secret that plays a critical role in manufacturing. And we paid our respects to the dot matrix printers that made the ultimate sacrifice in the name of security.
Previously, on Oxide and Friends:
- OxF s01e15 - Theranos, Silicon Valley, and the March Madness of Tech Fraud
- OxF s04e28 - Books in the Box IV
- OxF s06e07 - Building a Quorum of Trust in the Oxide Rack
- OxF s03e18 - Okay, Doomer: A Rebuttal to AI Doom-mongering
Some of the topics we hit on, in the order that we hit them:
- You Can See Everything (A24)
- IANA: Root KSK Ceremonies
- Caliptra
- IANA YouTube: live streams
- RFD 585: Cosmo RoT Code Signing Ceremony
- RFD 605: Virtual Machine Identity and Attestation
- NLnet Labs: DNSSEC Offline KSK Ceremony Tools
If we got something wrong or missed something, please file a PR! Our next show will likely be on Monday at 5p Pacific Time on our Discord server; stay tuned to our Mastodon feeds for details, or subscribe to this calendar. We'd love to have you join us, as we always love to hear from new speakers!