[notfed]

> a camera sensor could be designed such that every image that is captured on the sensor gets signed by the sensor at the hardware level

A hardware-based private key like this will inevitably be leaked.

[beisner]

Each sensor could have a unique cert