Dead Printers Tell No Tales

We've talked about Oxide's Root of Trust--the hardware underpinning the security of the product--but how do we keep a bad actor from spoofing Oxide to load malicious software? Philip Tricca joined Bryan and Adam to describe the key ceremony, the process of creating and storing the secret that plays a critical role in manufacturing. And we paid our respects to the dot matrix printers that made the ultimate sacrifice in the name of security.

In addition to Bryan Cantrill and Adam Leventhal, our special guest was Philip Tricca.

Previously, on Oxide and Friends:

• OxF s01e15 - Theranos, Silicon Valley, and the March Madness of Tech Fraud
• OxF s04e28 - Books in the Box IV
• OxF s06e07 - Building a Quorum of Trust in the Oxide Rack
• OxF s03e18 - Okay, Doomer: A Rebuttal to AI Doom-mongering

Some of the topics we hit on, in the order that we hit them:

• You Can See Everything (A24)
• IANA: Root KSK Ceremonies
• Caliptra
• IANA YouTube: live streams
• RFD 585: Cosmo RoT Code Signing Ceremony
• RFD 605: Virtual Machine Identity and Attestation
• NLnet Labs: DNSSEC Offline KSK Ceremony Tools

If we got something wrong or missed something, please file a PR! Our next show will likely be on Monday at 5p Pacific Time on our Discord server; stay tuned to our Mastodon feeds for details, or subscribe to this calendar. We'd love to have you join us, as we always love to hear from new speakers!