TPM 2.0 Future Project/Alternatives

[fsflover]

@Raist

When reading around about certified laptops etc. to use with Qubes it seems that many newer models work perfectly well but are missing support for “coreboot” and therefore don’t make the list.

There is Community-recommended computers list, which contains machines without coreboot.

@Raist

it just makes sure no changes in the boot process have taken place? Would this only be possible if someone had physical access to the device or is this a concern for net attacks as well?

Technically, if you can reflash your BIOS from the OS, anyone else with root access (in dom0) can do it, too (highly unlikely though). It’s fine to have a threat model not accounting for this.