<i>&gt; Intel has to authorize[3] you binary before it can be loaded into an enclave.</i><p>Wouldn&#x27;t that make Intel liable for the actions of the binary?  They would have to manage an application review process for any binary on any operating system, which sounds like an app store nightmare writ large.  Not to mention revocation and repeating the entire process for security updates to software in the enclave.  Could different governments require Intel to impose different blacklists on enclave software authors?<p>It&#x27;s hard to see why they Intel would open themselves to such complex scenarios, unless it&#x27;s a trial balloon that precedes a federated model or some other method of distributing key authority to multiple app stores and&#x2F;or the hardware owner.