On Tue, 17 Aug 2021 at 19:54, Mimi Zohar [off-list ref] wrote:

On Tue, 2021-08-17 at 16:13 +0200, Ahmad Fatoum wrote:

quoted

On 17.08.21 15:55, Mimi Zohar wrote:

quoted

I have no opinion as to whether this is/isn't a valid usecase.

So you'd be fine with merging trusted key support as is and leave encrypted
key support to someone who has a valid use case and wants to argue
in its favor?

That decision as to whether it makes sense to support trusted keys
directly, based on the new trust sources, is a decision left up to the
maintainer(s) of the new usecase and the new trust sources maintainer
Jarkko.

I would be in favor of supporting the use of trusted keys directly
when it comes to TEE as a trust source.

-Sumit

thanks,

Mimi