Adam Jackson wrote:
False. Quoting from Matthew's original post:
"A system in custom mode should allow you to delete all existing keys
and replace them with your own. After that it's just a matter of
re-signing the Fedora bootloader (like I said, we'll be providing tools
and documentation for that) and you'll have a computer that will boot
Fedora but which will refuse to boot any Microsoft code."
Removing the M$ key is not viable because the firmware on some peripheral
hardware will be signed only with the M$ key.
Kevin Kofler