&gt; subject to key-dumping<p>Not if you are running a skylake CPU with the new SGX instructions that encrypt RAM.<p><a href="https:&#x2F;&#x2F;software.intel.com&#x2F;en-us&#x2F;blogs&#x2F;2013&#x2F;09&#x2F;26&#x2F;protecting-application-secrets-with-intel-sgx" rel="nofollow">https:&#x2F;&#x2F;software.intel.com&#x2F;en-us&#x2F;blogs&#x2F;2013&#x2F;09&#x2F;26&#x2F;protecting...</a><p><pre><code>    6, Enable software vendors to deliver trusted applications and updates 

    8. Enable applications to define secure regions of code and data that
       maintain confidentiality even when an attacker has physical control
       of the platform and can conduct direct attacks on memory.
</code></pre>
By &quot;trusted&quot;, Intel almost certainly means &quot;trusted computing&quot;&#x2F;&quot;trusted execution environment&quot;. It took a decade, but Palladium (NGSCB) is here.<p>Firefox already caved and ships the EME plugin, so obviously they would cave to an image-DRM plugin as well.<p>&#x2F;* this is why it&#x27;s so incre4dibly important to take a hard-line stance against DRM; it&#x27;s a lot harder to reverse course once you cave and start accepting <i>some</i> DRM *&#x2F;