Intel TXT DRTM measured launch can verify BIOS hash.
Which non-Chinese router hardware would you recommend? PC Engines (Taiwan, Switzerland) is no more.
On a related note, "US House Passes Bill to Assess Threats Posed by Foreign Network Routers", https://news.ycombinator.com/item?id=43889149
> Protectli was founded in 2016 in a Southern California garage with a clear mission: providing reliable, cost-effective, and secure computer equipment that free users from proprietary vendor lock-in and expensive contracts. Today, we’re a global leader in network security hardware with offices across the United States, Canada, and Europe. We are trusted by thousands of customers worldwide, from home users to international corporations.
bustling-noose•8mo ago
That being said, home routers are the least supported devices when it comes to security and privacy. People are running age old firmwares that are known to have exploits. These things are literally so cheap and poorly maintained anything with openwrt is going to be better.
For offices I would not shy away from recommending protectli with openwrt or opnsense as long as there are people with enough expertise to maintain these things long term.
bayindirh•8mo ago
...assuming that the particular processor you're using won't have any proprietary extensions or requirements to bootstrap during power on (with a closed source blob, not unlike onboard firmware).
transpute•8mo ago
bayindirh•8mo ago
Your comment is also parallel to what I tried to say.