On Mon, Jun 18, 2012 at 12:54:56AM -0400, Seth Johnson wrote:
But the best thing is that a free software UEFI would let anybody
put
their own key as hardware root, and this would stymie the
rationalizing of big shots holding root and granting signing services
to their hardware.
All UEFI implementations we're aware of will be shipping with support
for replacing all the secure boot keys, including Pk. UEFI itself is
also entirely free software, although specific implementations may not
be.
--
Matthew Garrett | mjg59(a)srcf.ucam.org