Windows 11: TPMs and Digital Sovereignty
The underlying point you <i>should</i> be calling out if you want to present this argument is that &quot;User freedom should prevail over companies&#x27; freedom&quot;. The only thing attestation enables is companies enacting their own policies along the lines of &quot;I only want users who are willing to let their device attest x level of security&quot;. The user is not required to use that service, they&#x27;re not required to run W11 or to enable the fTPM in their BIOS.<p>Asking for widespread change and the death of TPM attestation is like saying that companies should be forced to serve all customers even if it degrades the services they provide, if it requires x orders of magnitude more personnel for fraud&#x2F;risk&#x2F;etc management, or if it degrades the experience of other users on the service willing to perform attestation. Maybe this is the right approach, maybe we just need some good regulation that won&#x27;t deepen the moat of existing players, but this is the crux of the argument being made.<p>&gt; We are here to remind you that the TPM requirement of Windows 11 furthers the agenda to protect the PC against you, its owner.<p>No. It&#x27;s to protect third party services that your PC makes network requests to. Your PC in itself doesn&#x27;t need any protection from you.