Post #1308473

@jti42 @blinry firmware blobs really sucks, unfortunately it's more or less unsolvable for existing hardware without some very heavy handed legislation. For new devices we're growing our connections and networking with the hope to eventually find hardware partners we can work with on the software security side, we're working on a new immutable variant, largely following GNOME OS/systemd/amutable best practice. SELINUX would be good to have, we need someone to get it supported and maintained in Alpine most likely, code signing, flatpak v2 (eventually) and hopefully leveraging what we can from Qualcomms "keystore" TA to get some TPM functionality on Android devices (at least encryption key hammering protection and mayyybe measured boot)