I would like to create a bootable USB stick (so loaded with a given OS), that is read-only and badUSB proof (i.e. the stick has to verify if the firmware is signed). Is that possible with a Nitrokey, and if so, which one(s)? (so basically something equivalent to the Kanguru SS3 stick)
The goal is to have a key I can plug into any machine and have my OS run on it, without risking to have malware on the USB stick afterwards.