Signing TLS handshakes inside a TPM
Blog post demonstrates signing TLS handshakes in Go with a TPM-held private key; full text was unavailable behind an Anubis challenge.
The title indicates a technique write-up on using a TPM-protected private key to sign TLS handshakes from Go. The full article text was not retrievable because the site serves an Anubis Hashcash-style proof-of-work challenge to automated fetchers, so no additional technical details (code, library, or threat model) could be extracted at collection time.
- Walkthrough of protecting a TLS private key inside a TPM for handshake signing
- Go-based implementation of TPM-backed TLS
- Full article content was blocked by an Anubis proof-of-work challenge at collection time
Full article168 words · extracted from bschaatsbergen.com · click to collapse
Loading...
You are seeing this because the administrator of this website has set up Anubis to protect the server against the scourge of AI companies aggressively scraping websites. This can and does cause downtime for the websites, which makes their resources inaccessible for everyone.
Anubis is a compromise. Anubis uses a Proof-of-Work scheme in the vein of Hashcash, a proposed proof-of-work scheme for reducing email spam. The idea is that at individual scales the additional load is ignorable, but at mass scraper levels it adds up and makes scraping much more expensive.
Ultimately, this is a placeholder solution so that more time can be spent on fingerprinting and identifying headless browsers (EG: via how they do font rendering) so that the challenge proof of work page doesn't need to be presented to users that are much more likely to be legitimate.
Please note that Anubis requires the use of modern JavaScript features that plugins like JShelter will disable. Please disable JShelter or other such plugins for this domain.
Text extracted automatically; images, tables and formatting may be missing. Original: https://bschaatsbergen.com/posts/go-tpm-tls/