How does trusted hardware (a TEE such as Intel SGX) strengthen an oracle, and how does Town Crier use it?

Question

Accepted Answer

A TEE runs the oracle's fetch inside a hardware-isolated enclave that even the machine's owner cannot tamper with, and it attests the result — Town Crier uses this to turn scraped HTTPS pages into authenticated data feeds for smart contracts.
A TEE (Trusted Execution Environment), like Intel SGX, is a protected region of a CPU — an enclave — whose memory and execution are shielded from the operating system, the hypervisor, and even a malicious server operator. The hardware can also produce a signed attestation: cryptographic proof that a specific, unmodified program ran inside a genuine enclave and produced a given output. Town Crier (Zhang et al.) applies this as a push-based inbound oracle: it runs an HTTPS scraper inside SGX, so the data it feeds on-chain comes with hardware-backed evidence that it was fetched faithfully from the target website and not manipulated by whoever runs the oracle machine.
Go deeper:

Town Crier (Zhang et al., IACR ePrint) — the original paper: an SGX-backed authenticated data feed for smart contracts.
 Trusted execution environment (Wikipedia) — what an enclave is and how attestation proves what ran inside it.
 Intel SGX (Wikipedia) — the specific hardware Town Crier uses, plus its limits (e.g. side channels).