rzeta0, 15 days ago

@mjg59

surely this is impossible

i mean, you can wrote a dom0 that doesn't make it easy to see what is an dom0 but it is cryptographically possible

to achieve what you want would require the cryptographic isolation to not stop at the shared hardware

so perhaps you need a separate computer?

(i'm no expert, just thinking aloud - would welcome challenge to my notions about how security works)