Increasingly, people are working on virtual, software-based implementations of the TPM (just to give one example). In addition, companies are thinking about implementing virtual TPMs due to cost considerations. Much has been written about potential policy problems of hardware-based TPMs. It's interesting whether the policy implications of virtual TPMs are any different. Any thoughts?
