Yes, I understand the value of signatures, but thats not how PKI works.
If the owner of a device can't sign and install their own software, then your definition of PKI doesn't "work" at all.
The first party must be able to entirely decide that "some third party" for it to be anything more than an obfuscation of digital serfdom.
If the owner of a device can't sign and install their own software, then your definition of PKI doesn't "work" at all.
The first party must be able to entirely decide that "some third party" for it to be anything more than an obfuscation of digital serfdom.