It's time to talk about TEEs

Note for people in the remote attestation thread:

These TEEs are doing the easy mode version of the problem. The thing that they’re trying to attest and ensure the integrity of is small (typically a boot loader or unikernel-like image) and has narrow and well-defined interfaces to the outside world, where all of those interfaces are untrusted.

If you can solve this problem, that still doesn’t mean that you can solve the application-level version of remote attestation in a way that gives meaningful security guarantees. If you can’t solve this problem then you definitely can’t.