[solenoid0937]

You don't understand the use case or audience of this article:

> If your infra consistently enforces mTLS

This is for mutual authentication in corporate infrastructure. Attestation is a critical security property for these environments.

[sfdlkj3jk342a]

> Attestation is a critical security property for these environments.

No it's not. Every corporate network to which I've connected worked just fine without it.

[fleventynine]

> Every corporate network to which I've connected worked just fine without it.

Just because it appears to be working fine doesn't mean you are in control of it. Without hardware attestation, how do you know the machines are running the software you think they are?

[darkwater]

My spouse's local Linux account on my laptop works fine with their password set as their username as well. Is it technically secure, though?