BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.3mdeb.com//bsmconf//speaker//JS9N8Q
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsmconf-USEGUT@cfp.3mdeb.com
DTSTART;TZID=CET:20260924T103000
DTEND;TZID=CET:20260924T110000
DESCRIPTION:ExpressVPN introduced TrustedServer in 2019\, moving its VPN se
 rver fleet to a stateless architecture in which every server starts from a
  signed\, read-only image loaded into RAM\, with changes to the running op
 erating system discarded at reboot.\nSeven years in production have settle
 d the question of whether RAM-only infrastructure works. The more interest
 ing question now is how much further its trust boundary can extend.\nThose
  security properties — no persistence across reboot\, and a fleet that p
 rovably runs identical code — rest almost entirely on one thing: the int
 egrity of the boot path that gets the image into RAM. This talk focuses on
  that path rather than the RAM-only story around it. We are candid about t
 he threat model: what signature verification does and does not buy you\, a
 nd the classes of attack a stateless design does not eliminate on its own 
 — supply-chain compromise of the image\, boot-chain tampering\, and phys
 ical or DMA-adjacent threats.\nWe then outline where we want to go next: h
 ardware-rooted verified and measured boot\, freshness-bound remote attesta
 tion\, rollback-resistant policy\, and the release of short-lived secrets 
 only to an acceptably attested machine. We have come to pressure-test that
  direction with the people who work closest to firmware\, roots of trust\,
  and platform attestation.
DTSTAMP:20260929T231119Z
LOCATION:GPN-T Main Room
SUMMARY:TrustedServer: From a Verified Image to an Attested Machine - Franc
 esco Castellana
URL:https://cfp.3mdeb.com/bsmconf/talk/USEGUT/
END:VEVENT
END:VCALENDAR