Question for anyone with more understanding of the implementation…
Doesn’t this still presume the browser tells the truth to the third party attester? Could we not build something that just straight up lies to the attester? Says I’m a good Google chrome user with no extensions please serve me ads sir?
I dunno man, you can virtualise tpms, and if you can virtualise it, you can lie about it.