Hacker News Reader

Nice! Finally, a legit use case for TPMs.

That is: a use case where the "genuine advantage" presented to the end user isn't simply

* (remotely controlled) access restrictions on content (DRM), or

* marginal OS integrity when the device were to fall into the wrong hands (secure boot).

There are multiple legit use cases for TPMs, ssh-tpm-agent is neither the first nor the last.

Simple key storage and signing is the base useage for these things, people just focus on the "wrong" aspects of this.