attezt: device attestation, PKCS11 and ACME
Summary
The CCC talk introduces attezt, a Linux-oriented toolkit for device attestation using the new ACME device-attest-01 draft. It explains provisioning device-bound certificates, PKCS11 integration, and an attestation server to enable mTLS with strong device identity. The content highlights practical implications for cert management and secure device provisioning.