Post #1844206

@neil We tried to find a balance on how attestation could be meaningful without degrading user control of their own systems when we looked forward in the direction of this problem about 20 years ago. (paper was published about 4 or 5 years after we wrote it) In general, it can be a complicated problem with semi-competing interests. Principle 3 in the abstract is about the user's ability to constrain disclosure during attestation. https://www.researchgate.net/publication/220066790_Principles_of_remote_attestation