Signing TLS handshakes inside a TPM
summary
Anubis employs a Proof-of-Work scheme to deter AI companies from aggressively scraping websites by making the process computationally expensive. This approach reduces server load and prevents downtime caused by mass scraping activities. It serves as a temporary measure while developers work on more sophisticated fingerprinting methods to identify legitimate users. The goal is to balance accessibility for human users with the robustness of AI bot protection.
key points
- Anubis uses a Hashcash-inspired Proof-of-Work system to ensure that the computational cost of accessing a site is negligible for individuals but prohibitive for large-scale scrapers.
- The system requires modern JavaScript to function, meaning users with security plugins like JShelter must disable them to gain access.
- The current Proof-of-Work challenge is a placeholder until the server can better distinguish between headless browsers and human users through techniques like font rendering analysis.
who should read it
Website administrators and developers interested in bot mitigation strategies and the tension between AI training data collection and website stability.
discussion positive
consensus
Commenters generally agree that while TPMs provide strong machine-identity binding and attestation, they are significantly slower than CPU-based TLS and can be a DoS vector if used for all server traffic. There is a consensus that the value of this approach lies in specific high-security use cases, such as IoT gateways or confidential compute instances, where proving the hardware's integrity is more important than throughput. The discussion acknowledges that vTPMs offer better performance than physical chips but still introduce different trust boundaries.
top insight
The most valuable perspective is the distinction between organizational identity and machine identity; while HSMs are superior for protecting organizational keys, TPMs are uniquely capable of binding a cryptographic identity to a specific piece of hardware via attestation. This allows a system to verify that a request is coming from a specific, untampered device rather than just anyone possessing a stolen private key. This distinction clarifies the specific threat model where TPM-backed TLS is actually superior to traditional HSMs.
Generated by an LLM from the article and thread. Check the sources before relying on it.