This link seems broken. Some searching suggests that the title and slug may have changed, but I haven't found a working link to the article. Just from the title alone, I am extremely interested in reading more about this, because it's been largely mythical for a long time.
Sure, you could run on some hypothetical OS that supports DOITM and insert syscalls around every manipulation of secret data. Yeah, right.
JoshTriplett•3m ago
Last I saw, it seemed like the plan was to unconditionally enable it, and on the off chance there's ever a piece of hardware where it's a substantial performance win, offer a way to opt out of it.
JoshTriplett•1h ago
bangaladore•1h ago