[DanielDent]

A lot of stuff from this made it's way into the chromebook. There's a verified boot process, hardware assisted key management, rollback protection, ...

And it's all open source and nicely documented for anyone who cares to look. With a bit of work you can actually create your own chain of trust and run your own verified boot process.

It's very cool.

[knowaveragejoe]

What is this called? I'd like to look into it, but cursory searching is giving me more vague results.