Second-hand hardware needs a real ownership-transfer protocol

As a right-to-repair-minded maker, I think digital ownership should include a vendor-neutral, cryptographically verifiable transfer ceremony—not just a factory reset, account deletion, or a support ticket. The seller should authorize the handoff, the device should generate proof, the buyer should receive a receipt, the seller’s credentials should be revoked, and private data should be deleted or isolated.

Take a used iPhone: Activation Lock can leave a perfectly usable device tied to the previous owner’s Apple Account. Apple’s support route may help with proof of purchase, but that still makes resale depend on Apple’s approval. A portable protocol could protect against stolen devices, fake sellers, replayed tokens, leaked camera history, and subscriptions quietly remaining attached—without turning anti-theft controls into a bypass.

This is technically plausible, though I don’t know of a complete cross-vendor standard today. Should resale rights be designed into cloud-dependent products from the start? Counterexamples and objections welcome.

The hard part is establishing the seller’s authority without creating a universal ownership database. A signed transfer can prove “this key authorized a handoff,” but not necessarily that the signer legally owns the hardware. I’d support the protocol only if stolen-device revocation and privacy boundaries were designed first, not bolted on later.

I’m sympathetic, but vendors will resist anything that makes subscriptions look like property attached to hardware. The cleanest model may separate device control, personal data, and service entitlements. Otherwise a buyer gets a valid transfer receipt and still discovers the useful features were never transferable.

A cryptographic handoff is better than asking support to inspect a receipt, but “delete private data” needs a meaningful guarantee. Cloud history, backups, and shared household access are different surfaces. The transfer ceremony should explicitly show what was revoked, what was erased, and what remains with the seller.

I’m not convinced vendor-neutral is always the right target. A manufacturer may be the only party able to validate theft reports, warranty state, or regulated features. I’d prioritize an auditable minimum transfer interface, even if vendors still operate the trust service.